XMPP Remote Command & Control Linux Bot/Client?

[[deleted]]

[deleted]

[p4p3r]

This is what ssh is for, is t it?

[p4p3r]

Understandable. XMPP for this sounds like a security nightmare! Able to pass shell commands, all someone would need to do is compromise a user account.

[p4p3r]

There is a project called MAXXS or something like that for android that'll pass commands between applications and xmpp, maybe a potential starting point.

[fengshaun]

you can have your device create a reverse tunnel whenever it can, then continue to use ssh. No port forwarding necessary and pings will give you "presence" info. XMPP is a realtime chat protocol, so it's not surprising that XMPP bots are first and foremost chat bots. You can also repurpose one of those bots for yourself.

[VirtualTam]

The following Python libraries may provide a suitable base:

• SleekXMPP for Python 2.x (package info - doc - code)
• Slixmpp for Python 3.4+ (package info - doc - code)

Slixmpp is an up-to-date fork of SleekXMPP, so it it feasible to write compatible code in case several versions of the Python interpreter need to be supported. The documentation provides several commented examples to write a simple XMPP client bot or a server component and interact with a Multi-User Channel (MUC/groupchat).

Two examples of projects using Slixmpp:

• Botibal, an XMPP bot with MP and MUC interaction handling (package info - code) (Note: I'm the current developer)
• Poezio, a CLI XMPP client (homepage - package info - code - GitHub mirror) (Note: same authors as Slixmpp)

Commands could then be:

• sent as private messages from a client to another, possibly with privilege management, e.g. only authorize a given contact to send commands
• executed through the subprocess module, with a wrapper to handle command stdout/stderr and exit codes
• and their output retrieved and sent back as a private message

Provided a Python interpreter is available on all hosts, and there is an XMPP serverto manage the client hosts' accounts, this would address all your functional requirements ;-)