HTTPX Profile Updates

[its-a-feature]

The current httpx profile allows specifying multiple callback hosts during build, each of which can be used with a relatively static (or consistent) URI for each GET/POST. There was a request however to turn this from a static URI to having an array of URIs that are randomly chosen. This would change from:

# Server and agent have to agree on formats or comms won't work
name = "TEST"
################################################
## HTTP GET
################################################
## Description:
##      GET is used to poll teamserver for tasks
## Defaults:
##    verb "GET" <-- "GET" or "POST"
##    uri "/activity" <-- string
[get]
verb = "GET"
uri = "/index"

################################################
## CLIENT
################################################
## Description:
##      client identifies data going from the agent to the server
## Defaults:
##    headers <-- dictionary of key/value pairs
##      set with client.headers.Key = value
##    parameters <-- dictionary of key/value pairs
##      set with client.parameters.Key = value
##    message <-- dictionary of key/value pairs about the message the agent is sending to the server
##      location "cookie" <-- where to place the final message
##          valid locations are: 'cookie', 'body', 'uri', 'query'
##      name <-- name of cookie, query, or uri
##      transforms <-- array of transforms to do on the message
##          action <-- what transform action to take
##              valid actions are: 'base64', 'base64url', 'prepend', 'append', 'xor', 'netbios', 'netbiosu'
##          value <-- string value to use as a parameter when performing 'action'
[get.client]
headers."User-Agent" = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
[get.client.message]
location = "query"
name = "q"

# SENDS:
# GET /index?q=value
# User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

################################################
## SERVER
################################################
## Description:
##      server identifies data going from the server back to the agent
## Defaults:
##    headers <-- dictionary of key/value pairs
##      set with server.headers.Key = value
##    parameters <-- dictionary of key/value pairs
##      set with server.parameters.Key = value
##    message <-- dictionary of key/value pairs about the message the server is sending back to the agent
##      The final message will always be in the body of the response
##      transforms <-- array of transforms to do on the message
##          action <-- what transform action to take
##              valid actions are: 'base64', 'base64url', 'prepend', 'append', 'xor', 'netbios', 'netbiosu'
##          value <-- string value to use as a parameter when performing 'action'
[get.server.headers]
Server = "Server"
Cache-Control = "max-age=0, no-cache"

# Sends
# Server: Server
# Cache-Control: max-age=0, no-cache

[post]
uri = "/data"
verb = "POST"
[post.client.headers]
"User-Agent" = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"

# Sends
# POST /data"
# User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

[post.server.headers]
Keep-Alive = "true"

# Sends
# Keep-Alive: true

# netbios encoded data

and be updated to:

# Server and agent have to agree on formats or comms won't work
name = "TEST"
################################################
## HTTP GET
################################################
## Description:
##      GET is used to poll teamserver for tasks
## Defaults:
##    verb "GET" <-- "GET" or "POST"
[get]
verb = "GET"
uris = [ "/index", "/other", "/some/complex/path" ]

################################################
## CLIENT
################################################
## Description:
##      client identifies data going from the agent to the server
## Defaults:
##    headers <-- dictionary of key/value pairs
##      set with client.headers.Key = value
##    parameters <-- dictionary of key/value pairs
##      set with client.parameters.Key = value
##    message <-- dictionary of key/value pairs about the message the agent is sending to the server
##      location "cookie" <-- where to place the final message
##          valid locations are: 'cookie', 'body', 'uri', 'query'
##      name <-- name of cookie, query, or uri
##      transforms <-- array of transforms to do on the message
##          action <-- what transform action to take
##              valid actions are: 'base64', 'base64url', 'prepend', 'append', 'xor', 'netbios', 'netbiosu'
##          value <-- string value to use as a parameter when performing 'action'
[get.client]
headers."User-Agent" = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
[get.client.message]
location = "query"
name = "q"

# SENDS:
# GET /index?q=value
# User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

################################################
## SERVER
################################################
## Description:
##      server identifies data going from the server back to the agent
## Defaults:
##    headers <-- dictionary of key/value pairs
##      set with server.headers.Key = value
##    parameters <-- dictionary of key/value pairs
##      set with server.parameters.Key = value
##    message <-- dictionary of key/value pairs about the message the server is sending back to the agent
##      The final message will always be in the body of the response
##      transforms <-- array of transforms to do on the message
##          action <-- what transform action to take
##              valid actions are: 'base64', 'base64url', 'prepend', 'append', 'xor', 'netbios', 'netbiosu'
##          value <-- string value to use as a parameter when performing 'action'
[get.server.headers]
Server = "Server"
Cache-Control = "max-age=0, no-cache"

# Sends
# Server: Server
# Cache-Control: max-age=0, no-cache
#
# {"survey_data": "someBase64Here"}

[post]
uris = [ "/data", "/login" ]
verb = "POST"
[post.client.headers]
"User-Agent" = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"

# Sends
# POST /data"
# User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

[post.server.headers]
Keep-Alive = "true"

# Sends
# Keep-Alive: true

# netbios encoded data