n0mad1k/CoM-c2itall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed havoc config template

Browse Source
This commit is contained in:
n0mad1k
2025-05-01 14:53:32 -04:00
parent 8396d2fe65
commit c717e0b0f1
3 changed files with 83 additions and 195 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy.py
+16 -10
View File
@@ -173,6 +173,12 @@ def interactive_setup(deployment_id=None):
# Ask if user wants to use cross-provider deployment
cross_provider = input("\nDo you want to deploy redirector and C2 on different providers? (y/n) [default: n]: ").lower() == 'y'
# If not cross-provider, ask if they want multi-region deployment upfront
use_multi_region = False
if not cross_provider:
use_multi_region = input("\nDo you want to deploy redirector and C2 in different regions? (y/n) [default: n]: ").lower() == 'y'
config['use_multi_region'] = use_multi_region
if cross_provider:
print("\nSelect redirector provider:")
for i, provider in enumerate(PROVIDERS, 1):
@@ -249,7 +255,9 @@ def interactive_setup(deployment_id=None):
for i, region in enumerate(aws_regions, 1):
print(f" {i}. {region}")
# Select region for redirector if this is the redirector provider
# Handle region selection based on deployment type
if cross_provider or use_multi_region:
# Select specific regions for redirector/C2 if this provider is used for them
if provider == config.get('redirector_provider', config['provider']):
region_input = input("\nSelect region for redirector (number or leave blank for random): ")
if region_input:
@@ -262,7 +270,6 @@ def interactive_setup(deployment_id=None):
except ValueError:
print("Invalid input, using random region")
# Select region for C2 if this is the C2 provider
if provider == config.get('c2_provider', config['provider']):
region_input = input("\nSelect region for C2 (number or leave blank for random): ")
if region_input:
@@ -274,9 +281,8 @@ def interactive_setup(deployment_id=None):
print(f"Invalid choice, using random region")
except ValueError:
print("Invalid input, using random region")
# If not cross-provider and no specific regions selected, use general region
if not cross_provider and not (config.get('redirector_region') or config.get('c2_region')):
else:
# Single region for both if not using multi-region
region_input = input("\nSelect region (number or leave blank for random): ")
if region_input:
try:
@@ -301,7 +307,9 @@ def interactive_setup(deployment_id=None):
for i, region in enumerate(linode_regions, 1):
print(f" {i}. {region}")
# Select region for redirector if this is the redirector provider
# Handle region selection based on deployment type
if cross_provider or use_multi_region:
# Select specific regions for redirector/C2 if this provider is used for them
if provider == config.get('redirector_provider', config['provider']):
region_input = input("\nSelect region for redirector (number or leave blank for random): ")
if region_input:
@@ -314,7 +322,6 @@ def interactive_setup(deployment_id=None):
except ValueError:
print("Invalid input, using random region")
# Select region for C2 if this is the C2 provider
if provider == config.get('c2_provider', config['provider']):
region_input = input("\nSelect region for C2 (number or leave blank for random): ")
if region_input:
@@ -326,9 +333,8 @@ def interactive_setup(deployment_id=None):
print(f"Invalid choice, using random region")
except ValueError:
print("Invalid input, using random region")
# If not cross-provider and no specific regions selected, use general region
if not cross_provider and not (config.get('redirector_region') or config.get('c2_region')):
else:
# Single region for both if not using multi-region
region_input = input("\nSelect region (number or leave blank for random): ")
if region_input:
try:
linode-images.json
-1
View File
File diff suppressed because one or more lines are too long
templates/havoc-config.yaotl.j2
+20 -137
View File
@@ -1,12 +1,10 @@
{% set random_hex = lookup('password', '/dev/null chars=hex_lower length=8') %}
Teamserver {
Host = "0.0.0.0"
Port = {{ havoc_teamserver_port | default(40056) }}
Build {
Compiler64 = "/usr/bin/x86_64-w64-mingw32-gcc"
Compiler86 = "/usr/bin/i686-w64-mingw32-gcc"
Compiler86 = "/usr/bin/x86_64-w64-mingw32-gcc"
Nasm = "/usr/bin/nasm"
}
}
@@ -19,147 +17,53 @@ Operators {
{% for operator in havoc_operators %}
user "{{ operator.name }}" {
Password = "{{ operator.password }}"
# Secret is not in documentation, removed or comment it out
# Secret = "{{ operator.secret | default(lookup('password', '/dev/null chars=hex_lower length=32')) }}"
}
{% endfor %}
{% endif %}
}
Listeners {
Http {
Name = "http"
KillDate = "{{ havoc_killdate | default('2030-01-01') }}"
WorkingHours = "{{ havoc_working_hours | default('0:00-23:59') }}"
{% if havoc_hosts is defined %}
Hosts = [
{% for host in havoc_hosts %}
"{{ host }}"{% if not loop.last %},{% endif %}
{% endfor %}
]
{% else %}
Hosts = ["0.0.0.0"]
{% endif %}
HostBind = "0.0.0.0"
HostRotation = "{{ havoc_host_rotation | default('round-robin') }}"
PortBind = {{ havoc_http_port | default(8080) }}
{% if havoc_portconn is defined %}
PortConn = {{ havoc_portconn }}
{% endif %}
{% if havoc_user_agent is defined %}
UserAgent = "{{ havoc_user_agent }}"
{% else %}
UserAgent = "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:{{ random_hex[1] | int + 90 }}.0) Gecko/20100101 Firefox/{{ random_hex[2] | int + 95 }}.0"
{% endif %}
Headers = [
{% if havoc_http_headers is defined %}
{% for header in havoc_http_headers %}
"{{ header }}"{% if not loop.last %},{% endif %}
{% endfor %}
{% else %}
"Accept: */*",
"Accept-Language: en-US,en;q=0.9",
"X-Requested-With: XMLHttpRequest"
{% endif %}
]
Uris = [
{% if havoc_http_uris is defined %}
{% for uri in havoc_http_uris %}
"{{ uri }}"{% if not loop.last %},{% endif %}
{% endfor %}
{% else %}
"/api/v{{ random_hex[6] | int + 1 }}",
"/dashboard",
"/content/{{ random_hex[1:4] }}",
"/wp-includes/{{ random_hex[1:6] }}.js"
{% endif %}
]
Secure = false
{% if havoc_proxy_enabled | default(false) %}
Proxy {
Host = "{{ havoc_proxy_host }}"
Port = {{ havoc_proxy_port }}
Username = "{{ havoc_proxy_username | default('') }}"
Password = "{{ havoc_proxy_password | default('') }}"
}
{% endif %}
}
Http {
Name = "https"
KillDate = "{{ havoc_killdate | default('2030-01-01') }}"
WorkingHours = "{{ havoc_working_hours | default('0:00-23:59') }}"
{% if havoc_hosts is defined %}
Hosts = [
{% for host in havoc_hosts %}
"{{ host }}"{% if not loop.last %},{% endif %}
{% endfor %}
"{{ redirector_subdomain }}.{{ domain }}"
]
{% else %}
Hosts = ["0.0.0.0"]
{% endif %}
HostBind = "0.0.0.0"
HostRotation = "{{ havoc_host_rotation | default('round-robin') }}"
HostRotation = "round-robin"
PortBind = {{ havoc_https_port | default(443) }}
{% if havoc_user_agent is defined %}
UserAgent = "{{ havoc_user_agent }}"
{% else %}
UserAgent = "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:{{ random_hex[1] | int + 90 }}.0) Gecko/20100101 Firefox/{{ random_hex[2] | int + 95 }}.0"
{% endif %}
PortConn = {{ havoc_https_port | default(443) }}
UserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36"
Headers = [
{% if havoc_https_headers is defined %}
{% for header in havoc_https_headers %}
"{{ header }}"{% if not loop.last %},{% endif %}
{% endfor %}
{% else %}
"Accept: */*",
"Accept-Language: en-US,en;q=0.9",
"X-Requested-With: XMLHttpRequest"
{% endif %}
"Accept-Language: en-US,en;q=0.9"
]
Uris = [
{% if havoc_https_uris is defined %}
{% for uri in havoc_https_uris %}
"{{ uri }}"{% if not loop.last %},{% endif %}
{% endfor %}
{% else %}
"/api/v{{ random_hex[6] | int + 2 }}",
"/api/v2",
"/content",
"/static/{{ random_hex[2:5] }}",
"/wp-content/plugins/{{ random_hex[1:6] }}"
{% endif %}
"/static/css",
"/wp-content/plugins"
]
Response {
Headers = [
"Content-Type: application/json",
"Cache-Control: no-store, private",
"X-Content-Type-Options: nosniff"
]
}
Secure = true
Cert {
Cert = "{{ havoc_cert_path | default('/root/Tools/Havoc/data/certs/havoc.crt') }}"
Key = "{{ havoc_key_path | default('/root/Tools/Havoc/data/certs/havoc.key') }}"
Cert = "/etc/letsencrypt/live/{{ domain }}/fullchain.pem"
Key = "/etc/letsencrypt/live/{{ domain }}/privkey.pem"
}
{% if havoc_proxy_enabled | default(false) %}
Proxy {
Host = "{{ havoc_proxy_host }}"
Port = {{ havoc_proxy_port }}
Username = "{{ havoc_proxy_username | default('') }}"
Password = "{{ havoc_proxy_password | default('') }}"
}
{% endif %}
}
{% if havoc_smb_enabled | default(false) %}
Smb {
Name = "smb"
PipeName = "{{ havoc_smb_pipename | default('havoc-' ~ random_hex[0:6]) }}"
}
{% endif %}
}
Demon {
Sleep = {{ havoc_sleep | default(random_hex[0:2] | int % 5 + 2) }}
Jitter = {{ havoc_jitter | default(random_hex[2:4] | int % 30 + 20) }}
{% if havoc_trust_x_forwarded_for is defined %}
TrustXForwardedFor = {{ havoc_trust_x_forwarded_for | lower }}
{% endif %}
Sleep = {{ havoc_sleep | default(5) }}
Jitter = {{ havoc_jitter | default(30) }}
Injection {
{% if havoc_spawn64 is defined %}
@@ -175,24 +79,3 @@ Demon {
{% endif %}
}
}
{% if havoc_service_enabled | default(false) %}
Service {
Endpoint = "{{ havoc_service_endpoint | default('/api/service') }}"
Password = "{{ havoc_service_password | default(lookup('password', '/dev/null chars=ascii_letters,digits length=32')) }}"
}
{% endif %}
{% if havoc_webhook_discord_enabled | default(false) %}
Webhook {
Discord {
Url = "{{ havoc_webhook_discord_url }}"
{% if havoc_webhook_discord_avatar_url is defined %}
AvatarUrl = "{{ havoc_webhook_discord_avatar_url }}"
{% endif %}
{% if havoc_webhook_discord_user is defined %}
User = "{{ havoc_webhook_discord_user }}"
{% endif %}
}
}
{% endif %}