Rubeus Jenkinsfile

Jenkinsfile

@Library('ci-jenkins-common') _

// Jenkins build pipeline (declarative)

// Project:         Seatbelt
// URL:             https://github.com/GhostPack/Seatbelt
// Author:          @tifkin_/@harmj0y
// Pipeline Author: harmj0y

def gitURL = "https://github.com/GhostPack/Seatbelt"
def commitHash = "08314908a5676f597722d8f374cd3a74220638b4"; // Oct 19, 2020


pipeline {

    // run everything on an existing agent configured with a label 'windows'
    agent { label 'windows' }


    options {
        // add timestamps to the console log
        timestamps()

        // discard old builds, keeping a max number of 5 builds
        buildDiscarder(logRotator(numToKeepStr: '5'))
    }


    // Note: parameters/options don't appear until the job is run once
    parameters {
        // unique project ID that's used to track the build runs
        string name: 'ProjectID', defaultValue: 'Master', description: 'ProjectID associated with the build.', trim: true
    }


    stages {
        
        stage('checkout') {
            steps {
                // clone the code base with up to 5 retries on failure
                script {
                    try {
                        checkout([
                            $class: 'GitSCM',
                            branches: [[name: "${commitHash}"]],
                            doGenerateSubmoduleConfigurations: false,
                            extensions: [[$class: 'CleanBeforeCheckout']],
                            submoduleCfg: [],
                            userRemoteConfigs: [[url: "${gitURL}"]]
                        ])
                    }
                    catch(error) {
                        echo "Clone of ${gitURL} failed: ${error} . Retrying."
                        retry(5) {
                            checkout([
                                $class: 'GitSCM',
                                branches: [[name: "${commitHash}"]],
                                doGenerateSubmoduleConfigurations: false,
                                extensions: [[$class: 'CleanBeforeCheckout']],
                                submoduleCfg: [],
                                userRemoteConfigs: [[url: "${gitURL}"]]
                            ])
                        }
                    }
                }
            }
        }


        stage('prep') {
            steps {
                // common function to replace a known "bad" term
                replaceAll("*.cs", "Mimikatz", "PROJECT")

                script {
                    // replace AssemblyInfo.cs with a clean one
                    replaceAssemblyInfo()

                    // replace the assembly name
                    replaceAssemblyName()
                }
            }
        }


        stage('build') {
            steps {
                script {
                    // build the project for .NET 3.5 and 4.0
                    //  'ci-jenkins-common' library function -> 'msbuild("PROJECT.sln", ".NET_VERSION")'

                    msbuild("${JOB_NAME}.sln", "3.5")

                    msbuild("${JOB_NAME}.sln", "4.0")
                }

                // rename the build output binaries to "{JOB_NAME}_{.NET_VERSION}.exe"
                fileOperations(
                    [
                        fileRenameOperation(
                            source: "${JOB_NAME}/bin/3.5/${JOB_NAME}.exe",
                            destination: "${JOB_NAME}/bin/3.5/${JOB_NAME}_3.5.exe"
                        ),
                        fileRenameOperation(
                            source: "${JOB_NAME}/bin/4.0/${JOB_NAME}.exe",
                            destination: "${JOB_NAME}/bin/4.0/${JOB_NAME}_4.0.exe"
                        )
                    ]
                )
            }
        }


        stage('obfuscation') {
            steps {
                script {
                    // obfuscate the binary using a 'ci-jenkins-common' library function
                    obfuscateDotnetBinary("3.5", "Seatbelt", "Seatbelt")
                    obfuscateDotnetBinary("4.0", "Seatbelt", "Seatbelt")
                }
            }
        }


        stage('opsec tests') {
            steps {
                script {
                    // test the build artifacts using a 'ci-jenkins-common' library function
                    testOpsec("${JOB_NAME}\\bin\\3.5\\${JOB_NAME}_3.5.exe")
                    testOpsec("${JOB_NAME}\\bin\\3.5\\${JOB_NAME}_3.5_obf.exe")
                    testOpsec("${JOB_NAME}\\bin\\4.0\\${JOB_NAME}_4.0.exe")
                    testOpsec("${JOB_NAME}\\bin\\4.0\\${JOB_NAME}_4.0_obf.exe")
                }
            }
        }


        stage('fingerprinting') {
            steps {
                script {
                    // fingerprint the build artifacts using a 'ci-jenkins-common' library function
                    fingerprintArtifact("${JOB_NAME}\\bin\\3.5\\${JOB_NAME}_3.5.exe")
                    fingerprintArtifact("${JOB_NAME}\\bin\\3.5\\${JOB_NAME}_3.5_obf.exe")
                    fingerprintArtifact("${JOB_NAME}\\bin\\4.0\\${JOB_NAME}_4.0.exe")
                    fingerprintArtifact("${JOB_NAME}\\bin\\4.0\\${JOB_NAME}_4.0_obf.exe")
                }
            }
        }


        // Publish to Artifactory
        //  Note: have to use ${params.PARAM_NAME} syntax here to access a parameter value (instead of an env var)
        stage('publish') {
            steps {
                rtBuildInfo()
            
                script {
                    
                    bat 'git rev-parse HEAD > commit'
                    def commit = readFile('commit').trim()

                    rtUpload (
                        serverId: "artifactory-prod",
                        spec:
                        """{
                            "files": [
                            {
                                "pattern": "*/bin/*/*_*.exe",
                                "target": "OffensiveToolkit/Projects/${params.ProjectID}/",
                                "props": "language=csharp;ext=exe;type=postex;ProjectID=${params.ProjectID};rev=${commit}"
                            },

                            {
                                "pattern": "*.iocs",
                                "target": "IOCS/Projects/${params.ProjectID}/",
                                "props": "language=iocs;ext=iocs;type=iocs;ProjectID=${params.ProjectID};rev=${commit}"
                            },
                            {
                                "pattern": "*.iocs",
                                "target": "IOCS/Tools/${JOB_NAME}/${BUILD_NUMBER}/",
                                "props": "language=iocs;ext=iocs;type=iocs;ProjectID=${params.ProjectID};rev=${commit}"
                            }
                            ]
                        }"""
                    )
                }
            }
        }
    }


    post {
        always {
            // report the report results
            nunit testResultsPattern: '*/bin/*/*.exe.xml'
        }

        success {
            // archive the artifacts
            archiveArtifacts artifacts: '*/bin/*/*_*.exe', fingerprint: true
        }
        
        cleanup {
            // clean up our workspace
            deleteDir()

            // clean up tmp directory
            dir("${workspace}@tmp") {
                deleteDir()
            }

            // clean up script directory
            dir("${workspace}@script") {
                deleteDir()
            }
            
            // clean up libs directory
            dir("${workspace}@libs") {
                deleteDir()
            }
        }
    }
}