basic deployment of redirector and c2 working

2025-04-12 13:21:31 -04:00
parent 50dd4f99e4
commit bd0dcf693c
11 changed files with 162 additions and 484 deletions
@@ -0,0 +1,136 @@
+---
+# Common task for configuring C2 server
+# Shared across all providers
+
+- name: Update apt cache
+  apt:
+    update_cache: yes
+
+- name: Set a custom MOTD
+  template:
+    src: "../templates/motd.j2"
+    dest: /etc/motd
+    owner: root
+    group: root
+    mode: '0644'
+
+- name: Install base utilities and tools via apt
+  apt:
+    name:
+      - git
+      - wget
+      - curl
+      - unzip
+      - python3-pip
+      - python3-venv
+      - tmux
+      - pipx
+      - nmap
+      - tcpdump
+      - hydra
+      - john
+      - hashcat
+      - sqlmap
+      - gobuster
+      - dirb
+      - enum4linux
+      - dnsenum
+      - seclists
+      - responder
+      - golang
+      - proxychains
+      - tor
+      - crackmapexec
+      - jq
+      - unzip
+      - postfix
+      - certbot
+      - opendkim
+      - opendkim-tools
+      - dovecot-core
+      - dovecot-imapd
+      - dovecot-pop3d
+      - dovecot-sieve
+      - dovecot-managesieved
+      - yq
+    state: present
+
+- name: Copy operational scripts
+  copy:
+    src: "{{ item }}"
+    dest: "/opt/c2/{{ item }}"
+    mode: '0700'
+    owner: root
+    group: root
+  with_items:
+    - clean-logs.sh
+    - secure-exit.sh
+    - serve-beacons.sh
+
+- name: Create operational directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    mode: '0700'
+    owner: root
+    group: root
+  with_items:
+    - /opt/c2
+    - /opt/beacons
+    - /opt/payloads
+
+- name: Create Sliver service file
+  copy:
+    content: |
+      [Unit]
+      Description=Sliver C2 Server
+      After=network.target
+      
+      [Service]
+      Type=simple
+      User=root
+      Group=root
+      WorkingDirectory=/root/.sliver
+      ExecStart=/usr/local/bin/sliver-server daemon
+      Restart=always
+      RestartSec=10
+      
+      # Security measures
+      PrivateTmp=true
+      ProtectHome=false
+      NoNewPrivileges=true
+      
+      # Hide process information
+      StandardOutput=null
+      StandardError=null
+      
+      [Install]
+      WantedBy=multi-user.target
+    dest: /etc/systemd/system/sliver.service
+    mode: '0644'
+    owner: root
+    group: root
+
+- name: Set up cron job for log cleaning if zero-logs enabled
+  cron:
+    name: "Clean logs"
+    minute: "0"
+    hour: "*/6"
+    job: "/opt/c2/clean-logs.sh > /dev/null 2>&1"
+  when: zero_logs | bool
+
+- name: Install Let's Encrypt certificate if domain specified
+  shell: |
+    certbot certonly --standalone -d {{ c2_subdomain }}.{{ domain }} --non-interactive --agree-tos -m {{ letsencrypt_email }}
+  args:
+    creates: /etc/letsencrypt/live/{{ c2_subdomain }}.{{ domain }}/fullchain.pem
+  when: domain != "example.com"
+
+- name: Configure and start beacon server
+  shell: |
+    sed -i "s/C2_HOST=.*/C2_HOST=\"{{ ansible_host }}\"/g" /opt/c2/serve-beacons.sh
+    chmod +x /opt/c2/serve-beacons.sh
+    # Check if beacon server is already running
+    if ! pgrep -f "/opt/c2/serve-beacons.sh" > /dev/null; then
+      nohup /opt/c2/serve-beacons.sh > /dev/null 2>&1 &
+    fi