fingers crossed
This commit is contained in:
n0mad1k
@@ -55,7 +55,7 @@
|
|||||||
|
|
||||||
- name: Create shell handler service
|
- name: Create shell handler service
|
||||||
template:
|
template:
|
||||||
src: "shell-handler.service.j2"
|
src: "../templates/shell-handler.service.j2"
|
||||||
dest: /etc/systemd/system/shell-handler.service
|
dest: /etc/systemd/system/shell-handler.service
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
owner: root
|
owner: root
|
||||||
@@ -63,7 +63,7 @@
|
|||||||
|
|
||||||
- name: Configure NGINX for zero-logging if enabled
|
- name: Configure NGINX for zero-logging if enabled
|
||||||
template:
|
template:
|
||||||
src: "nginx.conf.j2"
|
src: "../templates/nginx.conf.j2"
|
||||||
dest: /etc/nginx/nginx.conf
|
dest: /etc/nginx/nginx.conf
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
owner: root
|
owner: root
|
||||||
@@ -72,7 +72,7 @@
|
|||||||
|
|
||||||
- name: Configure NGINX for C2 redirection
|
- name: Configure NGINX for C2 redirection
|
||||||
template:
|
template:
|
||||||
src: "redirector-site.conf.j2"
|
src: "../templates/redirector-site.conf.j2"
|
||||||
dest: /etc/nginx/sites-available/default
|
dest: /etc/nginx/sites-available/default
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
owner: root
|
owner: root
|
||||||
@@ -80,7 +80,7 @@
|
|||||||
|
|
||||||
- name: Create legitimate-looking index.html
|
- name: Create legitimate-looking index.html
|
||||||
template:
|
template:
|
||||||
src: "redirector-index.html.j2"
|
src: "../templates/redirector-index.html.j2"
|
||||||
dest: /var/www/html/index.html
|
dest: /var/www/html/index.html
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
owner: www-data
|
owner: www-data
|
||||||
|
|||||||
@@ -37,7 +37,6 @@ http {
|
|||||||
|
|
||||||
# Headers to confuse fingerprinting
|
# Headers to confuse fingerprinting
|
||||||
# Microsoft-IIS/8.5 server header to throw off analysis
|
# Microsoft-IIS/8.5 server header to throw off analysis
|
||||||
#more_set_headers 'Server: Microsoft-IIS/8.5';
|
|
||||||
add_header Server "Microsoft-IIS/8.5";
|
add_header Server "Microsoft-IIS/8.5";
|
||||||
server_name_in_redirect off;
|
server_name_in_redirect off;
|
||||||
|
|
||||||
@@ -0,0 +1,122 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>{{ redirector_subdomain }} - Content Delivery Network</title>
|
||||||
|
<style>
|
||||||
|
body {
|
||||||
|
font-family: Arial, sans-serif;
|
||||||
|
margin: 0;
|
||||||
|
padding: 0;
|
||||||
|
background-color: #f4f4f4;
|
||||||
|
color: #333;
|
||||||
|
}
|
||||||
|
header {
|
||||||
|
background-color: #2c3e50;
|
||||||
|
color: white;
|
||||||
|
padding: 1em;
|
||||||
|
text-align: center;
|
||||||
|
}
|
||||||
|
.container {
|
||||||
|
width: 80%;
|
||||||
|
margin: 0 auto;
|
||||||
|
padding: 2em;
|
||||||
|
}
|
||||||
|
.card {
|
||||||
|
background-color: white;
|
||||||
|
border-radius: 5px;
|
||||||
|
padding: 1.5em;
|
||||||
|
margin-bottom: 1.5em;
|
||||||
|
box-shadow: 0 2px 5px rgba(0,0,0,0.1);
|
||||||
|
}
|
||||||
|
.feature {
|
||||||
|
display: flex;
|
||||||
|
align-items: center;
|
||||||
|
margin-bottom: 1em;
|
||||||
|
}
|
||||||
|
.feature-icon {
|
||||||
|
background-color: #3498db;
|
||||||
|
color: white;
|
||||||
|
border-radius: 50%;
|
||||||
|
width: 40px;
|
||||||
|
height: 40px;
|
||||||
|
display: flex;
|
||||||
|
align-items: center;
|
||||||
|
justify-content: center;
|
||||||
|
margin-right: 1em;
|
||||||
|
font-weight: bold;
|
||||||
|
}
|
||||||
|
footer {
|
||||||
|
background-color: #2c3e50;
|
||||||
|
color: white;
|
||||||
|
text-align: center;
|
||||||
|
padding: 1em;
|
||||||
|
position: fixed;
|
||||||
|
bottom: 0;
|
||||||
|
width: 100%;
|
||||||
|
}
|
||||||
|
.btn {
|
||||||
|
display: inline-block;
|
||||||
|
background-color: #3498db;
|
||||||
|
color: white;
|
||||||
|
padding: 0.7em 1.5em;
|
||||||
|
border-radius: 5px;
|
||||||
|
text-decoration: none;
|
||||||
|
font-weight: bold;
|
||||||
|
}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<header>
|
||||||
|
<h1>{{ redirector_subdomain }}.{{ domain }}</h1>
|
||||||
|
<p>Enterprise Content Delivery Network</p>
|
||||||
|
</header>
|
||||||
|
|
||||||
|
<div class="container">
|
||||||
|
<div class="card">
|
||||||
|
<h2>Welcome to Our CDN</h2>
|
||||||
|
<p>This server is part of our global content delivery network, optimizing digital asset delivery for enterprise applications. Our CDN provides fast, reliable, and secure content distribution across our global network.</p>
|
||||||
|
<p><em>This is a private service. Unauthorized access is prohibited.</em></p>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="card">
|
||||||
|
<h2>Our Features</h2>
|
||||||
|
|
||||||
|
<div class="feature">
|
||||||
|
<div class="feature-icon">1</div>
|
||||||
|
<div>
|
||||||
|
<h3>Global Distribution</h3>
|
||||||
|
<p>Content cached and distributed across multiple geographic locations for minimum latency.</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="feature">
|
||||||
|
<div class="feature-icon">2</div>
|
||||||
|
<div>
|
||||||
|
<h3>DDoS Protection</h3>
|
||||||
|
<p>Enterprise-grade protection against distributed denial of service attacks.</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="feature">
|
||||||
|
<div class="feature-icon">3</div>
|
||||||
|
<div>
|
||||||
|
<h3>Asset Optimization</h3>
|
||||||
|
<p>Automatic compression and format optimization for images, scripts, and styles.</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="card" style="text-align: center;">
|
||||||
|
<h2>Need Access?</h2>
|
||||||
|
<p>If you're a client requiring access to our CDN services, please contact your account representative.</p>
|
||||||
|
<a href="#" class="btn">Contact Sales</a>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<footer>
|
||||||
|
<p>© 2025 {{ domain }} CDN Services. All rights reserved.</p>
|
||||||
|
</footer>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,80 @@
|
|||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
server_name {{ redirector_subdomain }}.{{ domain }};
|
||||||
|
|
||||||
|
# Redirect to HTTPS
|
||||||
|
return 301 https://$host$request_uri;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
listen [::]:443 ssl;
|
||||||
|
server_name {{ redirector_subdomain }}.{{ domain }};
|
||||||
|
|
||||||
|
# SSL Configuration
|
||||||
|
ssl_certificate /etc/letsencrypt/live/{{ redirector_subdomain }}.{{ domain }}/fullchain.pem;
|
||||||
|
ssl_certificate_key /etc/letsencrypt/live/{{ redirector_subdomain }}.{{ domain }}/privkey.pem;
|
||||||
|
|
||||||
|
# Root directory
|
||||||
|
root /var/www/html;
|
||||||
|
index index.html;
|
||||||
|
|
||||||
|
# Primary location for legitimate website traffic
|
||||||
|
location / {
|
||||||
|
try_files $uri $uri/ =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Special URI patterns for C2 traffic
|
||||||
|
# These will redirect to the actual C2 server
|
||||||
|
|
||||||
|
# Sliver HTTP C2 channel
|
||||||
|
location /ajax/ {
|
||||||
|
proxy_pass http://{{ c2_ip }}:8888;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
proxy_set_header Connection "upgrade";
|
||||||
|
}
|
||||||
|
|
||||||
|
# Static resources that actually redirect to C2
|
||||||
|
location ~ ^/static/(css|js|images)/.*\.(css|js|png|jpg|jpeg|gif|ico)$ {
|
||||||
|
proxy_pass http://{{ c2_ip }}:8888;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Additional security headers
|
||||||
|
add_header X-Content-Type-Options "nosniff" always;
|
||||||
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||||
|
add_header X-XSS-Protection "1; mode=block" always;
|
||||||
|
add_header Referrer-Policy "no-referrer" always;
|
||||||
|
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;" always;
|
||||||
|
|
||||||
|
# Disable logging for this server block
|
||||||
|
access_log off;
|
||||||
|
error_log /dev/null crit;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Catch-all server block to respond to unknown hosts
|
||||||
|
server {
|
||||||
|
listen 80 default_server;
|
||||||
|
listen [::]:80 default_server;
|
||||||
|
listen 443 ssl default_server;
|
||||||
|
listen [::]:443 ssl default_server;
|
||||||
|
|
||||||
|
# Self-signed cert for catch-all
|
||||||
|
ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
|
||||||
|
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
|
||||||
|
|
||||||
|
# Redirect all unknown traffic to a legitimate-looking site
|
||||||
|
return 301 https://www.google.com;
|
||||||
|
|
||||||
|
# Disable logs
|
||||||
|
access_log off;
|
||||||
|
error_log /dev/null crit;
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user