entysec / seashell

SeaShell Framework is an iOS post-exploitation framework that enables you to access the device remotely, control it and extract sensitive information.

SeaShell Framework is an iOS/macOS post-exploitation framework that enables you to access the device remotely, control it and extract sensitive information.

Features

• Powerful Implant - SeaShell Framework uses the advanced and powerful payload with lots of features. It is called Pwny. You can extend it by adding your own post-exploitation modules or plugins.
• Basic Set - SeaShell Framework comes with basic set of post-exploitation modules that may exfiltrate following user data: SMS, VoiceMail, Safari history and much more.
• Encrypted communication - Communication between device and SeaShell is encrypted using the TLS 1.3 encryption by default.
• Regular updates - SeaShell Framework is being actively updated, so don't hesitate and leave your feature request!

Installation

To install SeaShell Framework you just need to type this command in your terminal:

pip3 install git+https://github.com/EntySec/SeaShell

After this SeaShell can be started with seashell command.

Updating

To update SeaShell and get new commands run this:

pip3 install --force-reinstall git+https://github.com/EntySec/SeaShell

Usage

Generating IPA

Simply generate custom IPA file or patch existing one and install it on target's iPhone or iPad via TrollStore or other IPA installer that bypasses CoreTrust.

Starting listener

Then you will need to start a listener on a host and port you added to your IPA. Once the installed application opens, you will receive a connection.

Accessing device

Once you have received the connection, you will be able to communicate with the session through a Pwny interactive shell. Use devices -i <id> to interact and help to view list of all available commands. You can even extract Safari history like in the example below.

Available commands

Find the map of available commands. New commands/modules being added regularly so this list might be outdated.

Covering them All

A wide range of iOS versions are supported, being 14.0 beta 2 - 16.6.1, 16.7 RC, and 17.0 beta 1 - 17.0, as these versions are vulnerable to the CoreTrust bug.

Endless Capabilities

Pwny is a powerful implant with plenty of features including evasion, dynamic extensions and much more. It is embedded into the second phase of SeaShell Framework attack. These are all phases:

• 1. IPA file installed and opened.
• 2. Pwny is loaded through posix_spawn().
• 3. Connection established and Pwny is ready to receive commands.

Issues and Bugs

SeaShell was just released and is in BETA stage for now. If you find a bug or some function that does not work we will be glad if you immediately submit an issue describing a problem. The more details the issue contains the faster we will be able to fix it.

External Resources

• Medium: SeaShell: iOS 16/17 Remote Access
• iDeviceCentral: iOS Malware Makes TrollStore Users Vulnerable To Monitoring, File Extraction & Remote Control on iOS 14 – iOS 17
• TheAppleWiki: SeaShell
• One Jailbreak: SeaShell Trojan Horse iOS

Legal Use

Note that the code and methods provided in this repository must not be used for malicious purposes and should only be used for testing and experimenting with devices you own. Please consider out Terms of Service before using the tool.

seashell's Issues

module 'PIL.Image' has no attribute 'ANTIALIAS'!

Describe the bug
when trying to generate the .ipa i get an error after entering the path to save the IPA: An error occurred: module 'PIL.Image' has no attribute 'ANTIALIAS'!

To Reproduce
(seashell)> ipa
[>] Application name (Mussel): seaShell
[>] Bundle ID (com.entysec.mussel): com.seaShell.seaShell
[?] Add application icon [y/N]: n
[>] Host to connect back: 192.168.2.116
[>] Port to connect back: 8888
[>] Path to save the IPA: seaShell.ipa
[-] An error occurred: module 'PIL.Image' has no attribute 'ANTIALIAS'!

Expected behavior
an .ipa file is generated and saved to ~/

Desktop (please complete the following information):

• OS: macOS 13.6.1, macbook pro 9,2
• Version: SeaShell Framework 1.0.0

connection via ngrok.io

Hi,
I want to ask if I can connect to listener via ngrok.io TCP tunnel
like i have this output when i turn on listener and can i use X.tcp.ngrok.io:port for builder and listen on localhost:8080 ?

Session Status online
Account User (Plan: Free)
Version 3.10.0
Region United States (us)
Latency XXms
Web Interface http://127.0.0.1:4040
Forwarding tcp://X.tcp.ngrok.io:XXXX -> localhost:8080

[feature] Process migration & Keylogger

I'd like to ask when is migration being added and resquest a keylog feature dont wrry im not one of those "when eta" kind of people xD just wanted to know

Mussel doesn't connect back

Describe the bug
I've installed everything according to the readme. iOS 15.6, Trollstore installed and working, generated the ipa using seashell, installed trollstore. Started listener on 0.0.0.0 9564 and the ipa has the correct ip address and port (verified 10 times). I can connect to the listener from a different computer via nc and when I ctrl-c the listener responds with error ssl.SSLEOFError: [SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1006) which seems to indicate that the listener is indeed accepting connections from other devices. however, I cannot connect to the listener from the iPhone and the app. The app opens succesfully and presents "Mussel Muffled" - however no connection back. I'm on the same wifi, there is no firewall active. Not sure how to debug this.
MacOS 13.2.1, M1, Python 3.11.6

Issue with installation on Mac

Traceback (most recent call last):
File "/Users/dnn/PycharmProjects/pythonProject/.venv/bin/seashell", line 5, in
from seashell import cli
File "/Users/dnn/PycharmProjects/pythonProject/.venv/lib/python3.11/site-packages/seashell/init.py", line 28, in
from seashell.core.ipa import IPA
File "/Users/dnn/PycharmProjects/pythonProject/.venv/lib/python3.11/site-packages/seashell/core/ipa.py", line 31, in
from pex.string import String
ModuleNotFoundError: No module named 'pex.string'

Windows support?

I have python3 installed and added to my path but seashell will not open after I run the install command. Is this user error or is their not windows support?

Building wheel for lief (pyproject.toml) did not run successfully.

https://i.imgur.com/YT151Zd.png

Install .ipa without TrollStore

TrollSotre is just an ipa installer witch uses CoreTrust bug. Why can't we include CoreTrust itself into generated ipa?

[update] Bump pylint score to ~10

What is your question?
So I recenty runned the pylint on the codebase and the results aren't that good. So is there any need to fix linting? also a workflow can be created to check wether the project really gets built, linting, formatting etc.

Additional context

Any suggestions for the docs?
can work on fixing the linting but will be a large commit (probably gonna sqash commits while merging here).

Linux / AUR

Is it possible to add this to the AUR so it's possible to use on arch linux based distributions?

Can you make it work for devices belongs to different network?

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Listener doesn't exist

What is your question?
Listener command doesn't seem to exist ?

Why is this happening?

Apple Air M2

Build command

May I ask why the ipa command is not working

Thank you

Mussel Makefile failed

Hi, first of all thank you for the awesome work.

When I try to make all and make install, it didn't generate mussel binary.
And when I try to manually compile mussel.m, it says:
mussel.m:27:10: fatal error: 'core.h' file not found.
How do I fix this issue? Am I missing something?

Thank you

does not work on the global network, but only on the local network

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context
Add any other context about the problem here.

If you connect to the ip using dynamic dns , the device that is logged into the application does not display, it turns out that so far it works only in the local network

Critical Error in using the tool...

Dump keychain items?

What is your question?
Is there a way to dump the ios keychains?
If yes, how can I execute it?

If no, could you add this feature?

Bug: Cannot run on Apple Silicon.

Bug:
Cannot run on Apple Silicon. Installed it but all you get is:

OSError: dlopen(/opt/homebrew/lib/python3.11/site-packages/capstone/lib/libcapstone.dylib, 0x0006): tried: '/opt/homebrew/lib/python3.11/site-packages/capstone/lib/libcapstone.dylib' (mach-o file, but is an incompatible architecture (have 'x86_64', need 'arm64')), '/System/Volumes/Preboot/Cryptexes/OS/opt/homebrew/lib/python3.11/site-packages/capstone/lib/libcapstone.dylib' (no such file), '/opt/homebrew/lib/python3.11/site-packages/capstone/lib/libcapstone.dylib' (mach-o file, but is an incompatible architecture (have 'x86_64', need 'arm64'))

This error originates from a subprocess, and is likely not a problem with pip

This error originates from a subprocess, and is likely not a problem with pip.

How to fix that??

Seashell IPA Patch Error (Windows)

This ipa patch command error happens with every single ipa, (ipa build command works that is which generates mussel, but not able to do it in existing ipa)

☻(seashell)> ipa patch test.ipa
☻[>] Host to connect back: 192.168.0.105
☻[>] Port to connect back: 8888
[-] An error occurred: [WinError 5] Access is denied: 'test\Payload\TrollLEDs.app\mussel'!
File "C:\Users\Joyas\AppData\Local\Programs\Python\Python310\lib\runpy.py", line 196, in _run_module_as_main
return run_code(code, main_globals, None,
File "C:\Users\Joyas\AppData\Local\Programs\Python\Python310\lib\runpy.py", line 86, in run_code
exec(code, run_globals)
File "C:\Users\Joyas\AppData\Local\Programs\Python\Python310\Scripts\seashell.exe_main.py", line 7, in
sys.exit(cli())
File "C:\Users\Joyas\AppData\Local\Programs\Python\Python310\lib\site-packages\seashell_init.py", line 106, in cli
console.console()
File "C:\Users\Joyas\AppData\Local\Programs\Python\Python310\lib\site-packages\seashell\core\console.py", line 199, in console
result = self.runtime.catch(self.shell)
File "C:\Users\Joyas\AppData\Local\Programs\Python\Python310\lib\site-packages\hatsploit\lib\runtime.py", line 126, in catch
traceback.print_stack(file=sys.stdout)
☻(seashell)>

Over wan not working tested with ngrok,playit

I tried on local lan and it worked but i tried over wan using ngrok and playit but the connection never come idk why

As you can see i put while generating ipa host name that ngrok gave to me and the port too
And i start listening on 127.0.0.1 and 1177 port

Note: ngrok and playit working
with other rats like (AsyncRAT)

Can't run `seashell` on Windows

Traceback (most recent call last):
File "", line 198, in run_module_as_main
File "", line 88, in run_code
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Scripts\seashell.exe_main.py", line 4, in
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\seashell_init.py", line 30, in
from seashell.core.console import Console
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\seashell\core\console.py", line 32, in
from hatsploit.lib.commands import Commands
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\hatsploit_init_.py", line 30, in
from .main import HatSploit, HatSploitGen
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\hatsploit_main_.py", line 30, in
from hatasm import HatAsm
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\hatasm_init_.py", line 25, in
from .main import HatAsm
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\hatasm_main_.py", line 25, in
from .assembler import Assembler
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\hatasm\assembler.py", line 27, in
import readline
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\readline.py", line 34, in
rl = Readline()
^^^^^^^^^^
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\pyreadline\rlmain.py", line 422, in init
BaseReadline.init(self)
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\pyreadline\rlmain.py", line 62, in init
mode.init_editing_mode(None)
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\pyreadline\modes\emacs.py", line 633, in init_editing_mode
self._bind_key('space', self.self_insert)
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\pyreadline\modes\basemode.py", line 162, in _bind_key
if not callable(func):
^^^^^^^^^^^^^^
File "C:\Users\korbo\AppData\Local\Programs\Python\Python312\Lib\site-packages\pyreadline\py3k_compat.py", line 8, in callable
return isinstance(x, collections.Callable)
^^^^^^^^^^^^^^^^^^^^
AttributeError: module 'collections' has no attribute 'Callable'

[bug] Mussel Draining Battery

The phone heats up to 40 degrees Celsius when using the payload. it also drains the battery very quickly even when it is not controlled

Iphone 11 - OS: iOS 16.2

facing a issue with seashell installation for Mac

when I am trying toi install seashell with command that provided in readme file its give me this error:

ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
googletrans-py 4.0.0 requires h2<5,>=4, but you have h2 3.2.0 which is incompatible.
googletrans-py 4.0.0 requires httpx>=0.22.0, but you have httpx 0.13.3 which is incompatible.
seleniumbase 4.19.2 requires chardet==5.2.0, but you have chardet 3.0.4 which is incompatible.
seleniumbase 4.19.2 requires charset-normalizer==3.3.0, but you have charset-normalizer 3.3.2 which is incompatible.
seleniumbase 4.19.2 requires h11==0.14.0, but you have h11 0.9.0 which is incompatible.
seleniumbase 4.19.2 requires idna==3.4, but you have idna 2.10 which is incompatible.
seleniumbase 4.19.2 requires urllib3<2.1.0,>=1.26.16; python_version >= "3.10", but you have urllib3 2.2.1 which is incompatible.
google-api-core 2.11.1 requires protobuf!=3.20.0,!=3.20.1,!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5,<5.0.0.dev0,>=3.19.5, but you have protobuf 5.26.0 which is incompatible.
google-cloud-translate 3.12.0 requires protobuf!=3.20.0,!=3.20.1,!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5,<5.0.0dev,>=3.19.5, but you have protobuf 5.26.0 which is incompatible.

Missing some modules from py (ig)

[-] An error occurred: Instagram is not a zip file!
File "/usr/local/bin/seashell", line 8, in
sys.exit(cli())
File "/home/kali/.local/lib/python3.11/site-packages/seashell/init.py", line 105, in cli
console.console()
File "/home/kali/.local/lib/python3.11/site-packages/seashell/core/console.py", line 198, in console
result = self.runtime.catch(self.shell)
File "/home/kali/.local/lib/python3.11/site-packages/hatsploit/lib/runtime.py", line 126, in catch
traceback.print_stack(file=sys.stdout)

I tried to reinstall seashell then something like this pop out on the red :
ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
faraday-agent-dispatcher 3.2.1 requires pytenable, which is not installed.
mitmproxy 10.2.2 requires mitmproxy-rs<0.6,>=0.5.1, which is not installed.
mitmproxy 10.2.2 requires urwid-mitmproxy<2.2,>=2.1.1, which is not installed.
crackmapexec 5.4.0 requires aioconsole<0.4.0,>=0.3.3, but you have aioconsole 0.7.0 which is incompatible.
crackmapexec 5.4.0 requires minikerberos==0.3.3, but you have minikerberos 0.4.0 which is incompatible.
crackmapexec 5.4.0 requires neo4j<5.0.0,>=4.1.1, but you have neo4j 5.2.dev0 which is incompatible.
crackmapexec 5.4.0 requires paramiko<3.0.0,>=2.7.2, but you have paramiko 3.4.0 which is incompatible.
crackmapexec 5.4.0 requires pypsrp<0.8.0,>=0.7.0, but you have pypsrp 0.8.1 which is incompatible.
crackmapexec 5.4.0 requires xmltodict<0.13.0,>=0.12.0, but you have xmltodict 0.13.0 which is incompatible.
faraday-agent-dispatcher 3.2.1 requires python-socketio==5.8.0, but you have python-socketio 5.7.2 which is incompatible.
fastapi 0.101.0 requires starlette<0.28.0,>=0.27.0, but you have starlette 0.31.1 which is incompatible.
lsassy 3.1.6 requires impacket<0.10.0,>=0.9.22, but you have impacket 0.11.0 which is incompatible.
lsassy 3.1.6 requires netaddr<0.9.0,>=0.8.0, but you have netaddr 1.2.1 which is incompatible.
lsassy 3.1.6 requires rich<11.0.0,>=10.6.0, but you have rich 13.3.1 which is incompatible.
mitmproxy 10.2.2 requires cryptography<41.1,>=39.0, but you have cryptography 42.0.5 which is incompatible.
mitmproxy 10.2.2 requires protobuf<5,>=3.14, but you have protobuf 5.26.1 which is incompatible.
mitmproxy 10.2.2 requires pyOpenSSL<23.4,>=22.1, but you have pyopenssl 24.1.0 which is incompatible.
notus-scanner 22.6.2 requires packaging<23.3, but you have packaging 24.0 which is incompatible.
ospd-openvas 22.6.2 requires lxml<5.0.0,>=4.5.2, but you have lxml 5.2.1 which is incompatible.
ospd-openvas 22.6.2 requires packaging<24.0,>=20.4, but you have packaging 24.0 which is incompatible.
ospd-openvas 22.6.2 requires redis>=4.5.0, but you have redis 4.3.4 which is incompatible.
pyppeteer 1.0.1 requires pyee<9.0.0,>=8.1.0, but you have pyee 11.1.0 which is incompatible.
pyppeteer 1.0.1 requires urllib3<2.0.0,>=1.25.8, but you have urllib3 2.2.1 which is incompatible.
theharvester 4.5.1 requires aiohttp==3.9.3, but you have aiohttp 3.9.1 which is incompatible.
theharvester 4.5.1 requires aiosqlite==0.19.0, but you have aiosqlite 0.17.0 which is incompatible.
theharvester 4.5.1 requires dnspython==2.5.0, but you have dnspython 2.6.1 which is incompatible.
theharvester 4.5.1 requires fastapi==0.109.0, but you have fastapi 0.101.0 which is incompatible.
theharvester 4.5.1 requires lxml==5.1.0, but you have lxml 5.2.1 which is incompatible.
theharvester 4.5.1 requires netaddr==0.10.1, but you have netaddr 1.2.1 which is incompatible.
theharvester 4.5.1 requires pyppeteer==1.0.2, but you have pyppeteer 1.0.1 which is incompatible.
theharvester 4.5.1 requires retrying==1.3.4, but you have retrying 1.3.3 which is incompatible.
theharvester 4.5.1 requires setuptools==69.0.3, but you have setuptools 68.1.2 which is incompatible.
theharvester 4.5.1 requires shodan==1.31.0, but you have shodan 1.30.1 which is incompatible.
theharvester 4.5.1 requires slowapi==0.1.8, but you have slowapi 0.1.4 which is incompatible.
theharvester 4.5.1 requires uvicorn==0.27.0.post1, but you have uvicorn 0.27.0 which is incompatible.

How to connect WLAN

What is your question?
When i build an ipa i use the default IP witch is 192.168.x.x, is that only for local connection?
How can i connect using Internet for remote control ? Do you know/recommend any method?
Thank you 😄

Additional context
Add any other context about the problem here.

Any suggestions for the docs?
Describe how would you fix the documentation to solve the problem.

Regarding cocoatop and mussel

You said (on reddit) that this would cause a process named mussel to be visible in cocoatop. I want to know the limits of this. Does it show up once you install the ipa and stay there untill you reboot ? Does it only show up when you open the app and keep it running ? Does it only show up when the attacker is messing with the system ? Can i kill this process from cocoatop to prevent it ? Is there a way to see which app is infected after seeing mussel in cocoatop without prior knownledge ? Sorry if most of these were in docs. Thanks.

Help

Help is this how it should be? What should I do next?

[feature] Fix `cam -s` command

Command cam -s fails to take a picture using one of the front or back cameras. Unfortunately, I don't have a solution yet. You can find a source code of this command here and try to find what's wrong:

https://github.com/EntySec/Pwny/blob/main/api/ios/cam.h

I can't install a Seashell

I still get an error when I enter the seashell command even if I install the Keystone engine and the Capstone solution doesn’t work for me
MBP M1 macOS 13.6.3
Python: 3.11.7 pip3: 23.3.1

File "/opt/homebrew/bin/seashell", line 5, in
from seashell import cli
File "/opt/homebrew/lib/python3.11/site-packages/seashell/init.py", line 31, in
from seashell.core.console import Console
File "/opt/homebrew/lib/python3.11/site-packages/seashell/core/console.py", line 32, in
from hatsploit.lib.commands import Commands
File "/opt/homebrew/lib/python3.11/site-packages/hatsploit/init.py", line 30, in
from .main import HatSploit, HatSploitGen
File "/opt/homebrew/lib/python3.11/site-packages/hatsploit/main.py", line 30, in
from hatasm import HatAsm
File "/opt/homebrew/lib/python3.11/site-packages/hatasm/init.py", line 25, in
from .main import HatAsm
File "/opt/homebrew/lib/python3.11/site-packages/hatasm/main.py", line 25, in
from .assembler import Assembler
File "/opt/homebrew/lib/python3.11/site-packages/hatasm/assembler.py", line 25, in
import keystone
File "/Users//Library/Python/3.11/lib/python/site-packages/keystone/init.py", line 4, in
from .keystone import Ks, ks_version, ks_arch_supported, version_bind, debug, KsError, _
version_
File "/Users//Library/Python/3.11/lib/python/site-packages/keystone/keystone.py", line 74, in
raise ImportError("ERROR: fail to load the dynamic library.")
ImportError: ERROR: fail to load the dynamic library.

Unable to run SeaShell Framework. Can't load commands rpc and listener due to exceptions

Describe the bug
I'm using WSL (Ubuntu) and MacOS Sonoma with different versions of Python (from 3.10 to 3.12) and the SeaShell refuses to load the rpc and listener commands.

Errors are different from what was reported in #22 and #19.

I've been trying to install and also reinstall the framework (as shown in the update section) with no results. Also, I manually updated the pex package from pip, and other solutions provided in those two issues.

To Reproduce
Just run the pip3 command mentioned in the install section of the Readme.

Screenshots

Desktop (please complete the following information):

• OS: Windows 11 + WSL Ubuntu (5.15.153.1-microsoft-standard-WSL2) / MacOS Sonoma (14.5)

hosting error

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. Mac m2]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone XR]
• OS: [e.g. iOS1 5.5]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context
Add any other context about the problem here.

I bought my hosting, i specified its ip in seashell but listening still doesn't work, how can i configure seashell to work in wan?

ModuleNotFoundError: No module named 'distutils'

Hello,
I can't run SeaShell. Could you help me please ?

When I run the command it appears in the last two line:
import distutils.sysconfig
ModuleNotFoundError: No module named 'distutils'

Thank you

Add this ?

Check this repo..

https://github.com/iOS17/Jailbreak?fbclid=IwZXh0bgNhZW0CMTEAAR1qgCZeGkAu70VaNb9_jk2PRCNxLlMBB7CIqGqtz1nwHmrxoucWNr0fv80_aem_SDEkPllw7v0hCwt-a9W2lw

https://github.com/RapierXbox/ESP32-Sour-Apple?fbclid=IwZXh0bgNhZW0CMTEAAR1GmfXbAGPPjicfhF1SxiFGMVkxhVPAqJbLjnDJy9e1BviYG_YJjHDfC3w_aem_AF79blKHzKXHJXaNflLm-A

Support for Apple Silicon

Download/Upload Functions

Describe the bug
Unable to download a remote file from attacker system onto device.
Unable to upload a local file to remote attacker system.

To Reproduce Download Issue
Steps to reproduce the behavior:

1. Establish C2 connection
2. Browse to /private/var/tmp on the iOS device
3. issue command 'download /path/to/remote/file /private/var/tmp'
4. See error 'downloadIssue1.png' and 'downloadIssue2.png'

To Reproduce Upload Issue
Steps to reproduce the behavior:

1. Establish C2 connection
2. Browse to /private/var/tmp on the iOS device
3. issue command 'upload /private/var/tmp/journeys/ /Users/dre/Tools/SeaShell/'
4. See error 'uploadIssue1.png' and 'uploadIssue2.png'

Expected behavior
The specified file on the remote attacker system should be downloaded into directory specified.
The specified file on the local system should be uploaded into directory specified on the remote attacker system.

Screenshots
downloadIssue1.png
downloadIssue2.png
uploadIssue1.png
uploadIssue2.png

Desktop (please complete the following information):

• OS: macOS 14.4.1
• M1 Max

Smartphone (please complete the following information):

• Device: iPhone 13 pro
• OS: iOS 16.6.1

I have problem when iam trying to start listener if it it's netcat or also in seashell it self so please can u help how could i connect

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Cam command not working

Describe the bug
Description: running a command did not receive an expected outcome and resulted in an error

To Reproduce
Steps to reproduce the behavior:

1. Start TCP server.
2. Connect to server by running injected app on the phone
3. Run devices -i 0
4. Run cam -s 0 <insert directory>
5. Get error: Failed to read device #0!

Expected behavior
Expected to receive image in the directory specified and not receive an error.

Screenshots

Desktop:

• OS: Linux Mint Cinnamon
• Browser Mozilla Firefox
• Version: 121.0.1+linuxmint1+virginia

Smartphone:

• Device: iPhone 6s and iPhone 13 (My Personal Devices)
• OS: iOS 15.2 (iPhone 6s) and iOS 16.6 beta 1 (iPhone 13)
• Browser: Safari
• Version: iOS 15.2 (iPhone 6s) and iOS 16.6 beta 1 (iPhone 13)