fixing port conflicts

tasks/configure_redirector.yml

@@ -138,6 +138,30 @@
   include_tasks: port_randomization.yml
   when: randomize_ports | default(true) | bool
 
+# Add just before configuring NGINX
+- name: Check if snakeoil certificates exist
+  stat:
+    path: /etc/ssl/certs/ssl-cert-snakeoil.pem
+  register: snakeoil_cert
+
+- name: Generate self-signed certificates if snakeoil not available
+  block:
+    - name: Create directory for self-signed certificates
+      file:
+        path: /etc/nginx/conf.d
+        state: directory
+        mode: '0755'
+
+    - name: Generate self-signed certificate
+      shell: |
+        openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout /etc/nginx/conf.d/selfsigned.key \
+        -out /etc/nginx/conf.d/selfsigned.crt \
+        -subj "/C=US/ST=State/L=City/O=Organization/CN=localhost"
+      args:
+        creates: /etc/nginx/conf.d/selfsigned.crt
+  when: not snakeoil_cert.stat.exists
+
 # Configure nginx for dual HTTP/HTTPS with complete encryption
 - name: Configure NGINX for secure C2 redirection
   template:

tasks/security_hardening.yml

@@ -89,8 +89,11 @@
             - "80"
             - "443"
             - "{{ havoc_http_port | default('8080') }}"
-            - "{{ havoc_https_port | default('443') }}" 
+            - "{{ havoc_https_port | default('9443') }}"  # Updated from 443
+            - "{{ havoc_payload_port | default('8443') }}"
             - "{{ gophish_admin_port }}"
+            - "{{ gophish_phish_port | default('8081') }}"
+            - "{{ tracker_port | default('5000') }}"
       when: "'c2servers' in group_names"
 
     - name: Configure UFW for redirector
@@ -116,7 +119,7 @@
           loop:
             - "80"
             - "443"
-            - "{{ shell_handler_port | default('4444') }}"
+            - "{{ shell_handler_port | default('4488') }}"
       when: "'redirectors' in group_names"
   # Only run UFW block if not AWS and UFW is available/installed
   when: not is_aws_provider and (ufw_check.rc == 0 or ufw_install is success)

tasks/traffic_flow_config.yml

@@ -50,7 +50,7 @@
         - { ip: "{{ redirector_ip }}", port: "80" }
         - { ip: "{{ redirector_ip }}", port: "443" }
         - { ip: "{{ redirector_ip }}", port: "{{ havoc_http_port | default('8080') }}" }
-        - { ip: "{{ redirector_ip }}", port: "{{ havoc_https_port | default('443') }}" }
+        - { ip: "{{ redirector_ip }}", port: "{{ havoc_https_port | default('9443') }}" }
         - { ip: "{{ logserver_ip | default(omit) }}", port: "5144" }
         - { ip: "{{ payloadserver_ip | default(omit) }}", port: "8888" }
       when: item.ip != omit