Initial public portfolio release

Sanitized version of red team infrastructure automation platform.
Operational content (implant pipelines, lures, credential capture)
replaced with documented stubs. Architecture and infrastructure
automation code intact.

modules/payload-server/tasks/configure_payload_redirector.yml

@@ -0,0 +1,89 @@
+---
+# Configure payload redirector for hosting and delivering payloads
+
+- name: Install required packages
+  apt:
+    name:
+      - nginx
+      - certbot
+      - python3-certbot-nginx
+    state: present
+    update_cache: yes
+
+- name: Create payload directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    mode: '0755'
+    owner: www-data
+    group: www-data
+  loop:
+    - /var/www/payloads
+    - /var/www/payloads/windows
+    - /var/www/payloads/linux
+    - /var/www/payloads/macos
+    - /var/www/payloads/docs
+
+- name: Configure NGINX for payload delivery
+  template:
+    src: "../templates/phishing/nginx-payload-redirector.j2"
+    dest: /etc/nginx/sites-available/payloads
+    mode: '0644'
+
+- name: Enable payload site
+  file:
+    src: /etc/nginx/sites-available/payloads
+    dest: /etc/nginx/sites-enabled/payloads
+    state: link
+
+- name: Create payload sync script
+  template:
+    src: "../templates/phishing/sync_payloads.sh.j2"
+    dest: /root/Tools/sync_payloads.sh
+    mode: '0700'
+
+- name: Set up payload sync timer
+  block:
+    - name: Create systemd service
+      copy:
+        content: |
+          [Unit]
+          Description=Payload Sync Service
+          After=network.target
+
+          [Service]
+          Type=oneshot
+          ExecStart=/root/Tools/sync_payloads.sh
+          User=root
+          
+          [Install]
+          WantedBy=multi-user.target
+        dest: /etc/systemd/system/payload-sync.service
+
+    - name: Create systemd timer
+      copy:
+        content: |
+          [Unit]
+          Description=Payload Sync Timer
+          Requires=payload-sync.service
+
+          [Timer]
+          OnBootSec=5min
+          OnUnitActiveSec=15min
+          Persistent=true
+
+          [Install]
+          WantedBy=timers.target
+        dest: /etc/systemd/system/payload-sync.timer
+
+    - name: Enable and start timer
+      systemd:
+        name: payload-sync.timer
+        state: started
+        enabled: yes
+        daemon_reload: yes
+
+- name: Configure firewall rules
+  include_tasks: security_hardening.yml
+  vars:
+    server_role: "payload_redirector"

modules/payload-server/tasks/configure_payload_server.yml

@@ -0,0 +1,78 @@
+---
+# Configure payload server for creating and hosting malicious payloads
+
+- name: Install payload generation tools
+  apt:
+    name:
+      - mingw-w64
+      - golang
+      - python3-pip
+      - upx-ucl
+      - osslsigncode
+      - mono-complete
+      - wine64
+      - wine32
+    state: present
+    update_cache: yes
+
+- name: Create payload directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    mode: '0700'
+    owner: root
+    group: root
+  loop:
+    - /root/Tools/payloads
+    - /root/Tools/payloads/templates
+    - /root/Tools/payloads/output
+    - /root/Tools/payloads/scripts
+
+- name: Install Python payload tools
+  pip:
+    name:
+      - pycryptodome
+      - pyinstaller
+      - py2exe
+    state: present
+
+- name: Clone payload generation tools
+  git:
+    repo: "{{ item.repo }}"
+    dest: "{{ item.dest }}"
+  loop:
+    - { repo: "https://github.com/Binject/go-donut", dest: "/root/Tools/go-donut" }
+    - { repo: "https://github.com/optiv/ScareCrow", dest: "/root/Tools/ScareCrow" }
+    - { repo: "https://github.com/TheWover/donut", dest: "/root/Tools/donut" }
+
+- name: Build Go tools
+  shell: |
+    cd {{ item }} && go build
+  args:
+    creates: "{{ item }}/{{ item | basename }}"
+  loop:
+    - /root/Tools/go-donut
+    - /root/Tools/ScareCrow
+
+- name: Deploy payload generation scripts
+  template:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: '0700'
+  loop:
+    - { src: "../templates/phishing/generate_doc_payloads.sh.j2", dest: "/root/Tools/payloads/scripts/generate_docs.sh" }
+    - { src: "../templates/phishing/generate_exe_payloads.sh.j2", dest: "/root/Tools/payloads/scripts/generate_exes.sh" }
+    - { src: "../templates/phishing/payload_obfuscator.py.j2", dest: "/root/Tools/payloads/scripts/obfuscate.py" }
+
+- name: Create payload hosting service
+  template:
+    src: "../templates/phishing/payload-server.service.j2"
+    dest: /etc/systemd/system/payload-server.service
+    mode: '0644'
+
+- name: Start payload server
+  systemd:
+    name: payload-server
+    state: started
+    enabled: yes
+    daemon_reload: yes