n0mad1k/CoM-c2itall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

reworked regions and started work on aws

Browse Source
This commit is contained in:
n0mad1k
2025-05-01 23:43:43 -04:00
parent 9e9383eeef
commit e3fe2b0509
7 changed files with 355 additions and 180 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AWS/c2.yml
+27 -24
View File
@@ -41,48 +41,51 @@
when: c2_key_pair.changed and c2_key_pair.key.private_key is defined
- name: Create a security group for the C2 server
amazon.aws.ec2_group:
access_key: "{{ aws_access_key }}"
secret_key: "{{ aws_secret_key }}"
amazon.aws.ec2_security_group:
name: "{{ c2_name }}-sg"
description: "Security group for C2 server {{ c2_name }}"
vpc_id: "{{ vpc_id }}"
region: "{{ aws_region }}"
rules:
- proto: tcp
ports:
ports:
- 22
- 80
- 443
- 8888 # Sliver HTTP listener
- 50051 # Sliver gRPC port
- 31337 # Additional C2 port
- "{{ havoc_teamserver_port | default(40056) }}"
- "{{ havoc_http_port | default(8080) }}"
- "{{ havoc_https_port | default(443) }}"
- "{{ gophish_admin_port | default(3333) }}"
cidr_ip: 0.0.0.0/0
rules_egress:
- proto: -1
cidr_ip: 0.0.0.0/0
register: c2_sg_result
state: present
register: security_group
- name: Launch C2 EC2 instance
- name: Set region for AWS C2 server
set_fact:
aws_c2_region: "{{ aws_region | default(region, true) | default('us-east-1', true) }}"
when: aws_region_choices is not defined or aws_region_choices|length == 0
- name: Set random region for AWS C2 server
set_fact:
aws_c2_region: "{{ aws_region_choices | random }}"
when: aws_region_choices is defined and aws_region_choices|length > 0 and aws_c2_region is not defined
- name: Launch EC2 instance for C2 server
amazon.aws.ec2_instance:
access_key: "{{ aws_access_key }}"
secret_key: "{{ aws_secret_key }}"
region: "{{ aws_region }}"
name: "{{ c2_name }}"
image_id: "{{ ami_map[aws_region] }}"
instance_type: "{{ instance_type }}"
key_name: "{{ c2_name }}"
security_groups:
- "{{ c2_name }}-sg"
key_name: "{{ aws_keypair_name }}"
instance_type: "{{ instance_type | default('t2.medium') }}"
security_group: "{{ c2_name }}-sg"
image_id: "{{ ami_id }}"
region: "{{ aws_c2_region }}"
state: present
wait: yes
tags:
Name: "{{ c2_name }}"
Role: "c2"
volumes:
- device_name: "/dev/xvda"
ebs:
volume_size: 100
delete_on_termination: true
register: c2_instance
register: ec2
- name: Set c2_ip for later use
set_fact:
AWS/cleanup.yml
+99
View File
@@ -72,6 +72,105 @@
c2_instance_id: "{{ c2_id_result.stdout | trim }}"
when: cleanup_c2 and c2_id_result.stdout is defined and c2_id_result.stdout | trim != ""
- name: Get information about the redirector security group
amazon.aws.ec2_security_group_info:
filters:
tag:redirector_name: "{{ redirector_name }}"
region: "{{ aws_region }}"
register: sg_info
ignore_errors: yes
when: cleanup_redirector | bool
- name: Get information about the VPC
amazon.aws.ec2_vpc_net_info:
filters:
tag:redirector_name: "{{ redirector_name }}"
region: "{{ aws_region }}"
register: vpc_info
ignore_errors: yes
when: cleanup_redirector | bool
- name: Get subnet information
amazon.aws.ec2_vpc_subnet_info:
filters:
tag:redirector_name: "{{ redirector_name }}"
region: "{{ aws_region }}"
register: subnet_info
ignore_errors: yes
when: vpc_info.vpcs is defined and vpc_info.vpcs | length > 0
- name: Get internet gateway information
amazon.aws.ec2_vpc_igw_info:
filters:
tag:redirector_name: "{{ redirector_name }}"
region: "{{ aws_region }}"
register: igw_info
ignore_errors: yes
when: vpc_info.vpcs is defined and vpc_info.vpcs | length > 0
- name: Get route table information
amazon.aws.ec2_vpc_route_table_info:
filters:
tag:redirector_name: "{{ redirector_name }}"
region: "{{ aws_region }}"
register: rtb_info
ignore_errors: yes
when: vpc_info.vpcs is defined and vpc_info.vpcs | length > 0
# Delete in proper order (dependencies first)
- name: Delete route tables
amazon.aws.ec2_vpc_route_table:
route_table_id: "{{ item.id }}"
region: "{{ aws_region }}"
state: absent
loop: "{{ rtb_info.route_tables | default([]) }}"
ignore_errors: yes
when: rtb_info.route_tables is defined and rtb_info.route_tables | length > 0
- name: Detach internet gateway from VPC
amazon.aws.ec2_vpc_igw:
vpc_id: "{{ vpc_info.vpcs[0].id }}"
region: "{{ aws_region }}"
state: absent
ignore_errors: yes
when: vpc_info.vpcs is defined and vpc_info.vpcs | length > 0 and igw_info.internet_gateways is defined and igw_info.internet_gateways | length > 0
- name: Delete internet gateway
amazon.aws.ec2_vpc_igw:
igw_id: "{{ item.id }}"
region: "{{ aws_region }}"
state: absent
loop: "{{ igw_info.internet_gateways | default([]) }}"
ignore_errors: yes
when: igw_info.internet_gateways is defined and igw_info.internet_gateways | length > 0
- name: Delete subnets
amazon.aws.ec2_vpc_subnet:
vpc_id: "{{ vpc_info.vpcs[0].id }}"
cidr: "{{ item.cidr_block }}"
region: "{{ aws_region }}"
state: absent
loop: "{{ subnet_info.subnets | default([]) }}"
ignore_errors: yes
when: subnet_info.subnets is defined and subnet_info.subnets | length > 0
- name: Delete security groups
amazon.aws.ec2_security_group:
group_id: "{{ item.group_id }}"
region: "{{ aws_region }}"
state: absent
loop: "{{ sg_info.security_groups | default([]) }}"
ignore_errors: yes
when: sg_info.security_groups is defined and sg_info.security_groups | length > 0
- name: Delete VPC
amazon.aws.ec2_vpc_net:
vpc_id: "{{ vpc_info.vpcs[0].id }}"
region: "{{ aws_region }}"
state: absent
ignore_errors: yes
when: vpc_info.vpcs is defined and vpc_info.vpcs | length > 0
- name: Terminate redirector instance
amazon.aws.ec2_instance:
state: absent
AWS/redirector.yml
+94 -29
View File
@@ -43,42 +43,107 @@
mode: "0600"
when: redirector_key_pair.changed and redirector_key_pair.key.private_key is defined
- name: Create a security group for the redirector
amazon.aws.ec2_group:
access_key: "{{ aws_access_key }}"
secret_key: "{{ aws_secret_key }}"
name: "{{ redirector_name }}-sg"
description: "Security group for redirector {{ redirector_name }}"
- name: Check if VPC exists with specified ID (if provided)
amazon.aws.ec2_vpc_net_info:
vpc_ids: "{{ vpc_id | default(omit) }}"
region: "{{ aws_region }}"
rules:
- proto: tcp
ports:
- 22
- 80
- 443
- "{{ shell_handler_port }}"
cidr_ip: 0.0.0.0/0
rules_egress:
- proto: -1
cidr_ip: 0.0.0.0/0
register: redirector_sg_result
register: vpc_info
when: vpc_id is defined and vpc_id | length > 0
- name: Launch redirector EC2 instance
amazon.aws.ec2_instance:
access_key: "{{ aws_access_key }}"
secret_key: "{{ aws_secret_key }}"
- name: Create VPC if not provided or not found
amazon.aws.ec2_vpc_net:
name: "{{ redirector_name }}-vpc"
cidr_block: "10.0.0.0/16"
region: "{{ aws_region }}"
tags:
Name: "{{ redirector_name }}-vpc"
redirector_name: "{{ redirector_name }}"
register: vpc_result
when: vpc_id is not defined or vpc_id | length == 0 or (vpc_info.vpcs | default([]) | length == 0)
- name: Set VPC ID from existing or newly created VPC
set_fact:
vpc_id: "{{ vpc_id if (vpc_id is defined and vpc_id | length > 0 and vpc_info.vpcs | length > 0) else vpc_result.vpc.id }}"
- name: Create internet gateway for VPC
amazon.aws.ec2_vpc_igw:
vpc_id: "{{ vpc_id }}"
region: "{{ aws_region }}"
state: present
tags:
Name: "{{ redirector_name }}-igw"
redirector_name: "{{ redirector_name }}"
register: igw_result
when: vpc_result.changed | default(false)
- name: Create subnet in VPC
amazon.aws.ec2_vpc_subnet:
vpc_id: "{{ vpc_id }}"
cidr: "10.0.1.0/24"
region: "{{ aws_region }}"
az: "{{ aws_region }}a"
map_public: yes
tags:
Name: "{{ redirector_name }}-subnet"
redirector_name: "{{ redirector_name }}"
register: subnet_result
when: vpc_result.changed | default(false)
- name: Create routing table for internet access
amazon.aws.ec2_vpc_route_table:
vpc_id: "{{ vpc_id }}"
region: "{{ aws_region }}"
tags:
Name: "{{ redirector_name }}-rtb"
redirector_name: "{{ redirector_name }}"
routes:
- dest: "0.0.0.0/0"
gateway_id: "{{ igw_result.gateway_id }}"
subnets:
- "{{ subnet_result.subnet.id }}"
register: route_table_result
when: vpc_result.changed | default(false) and igw_result.changed | default(false) and subnet_result.changed | default(false)
- name: Set region for AWS redirector
set_fact:
aws_redirector_region: "{{ aws_region | default(region, true) | default('us-east-1', true) }}"
when: aws_region_choices is not defined or aws_region_choices|length == 0
- name: Set random region for AWS redirector
set_fact:
aws_redirector_region: "{{ aws_region_choices | random }}"
when: aws_region_choices is defined and aws_region_choices|length > 0 and aws_redirector_region is not defined
- name: Launch EC2 instance for redirector
amazon.aws.ec2_instance:
name: "{{ redirector_name }}"
image_id: "{{ ami_map[aws_region] }}"
instance_type: "{{ instance_type }}"
key_name: "{{ redirector_name }}"
security_groups:
- "{{ redirector_name }}-sg"
key_name: "{{ aws_keypair_name }}"
instance_type: "{{ instance_type | default('t2.micro') }}"
security_group: "{{ redirector_name }}-sg"
image_id: "{{ ami_id }}"
region: "{{ aws_redirector_region }}"
state: present
wait: yes
tags:
Name: "{{ redirector_name }}"
Role: "redirector"
register: redirector_instance
register: ec2
- name: Launch EC2 instance for redirector
amazon.aws.ec2_instance:
name: "{{ redirector_name }}"
key_name: "{{ aws_keypair_name }}"
vpc_subnet_id: "{{ subnet_result.subnet.id | default(omit) }}"
instance_type: "{{ instance_type | default('t2.micro') }}"
security_group: "{{ redirector_name }}-sg"
network:
assign_public_ip: true
image_id: "{{ ami_id }}"
region: "{{ aws_region }}"
state: present
wait: yes
tags:
Name: "{{ redirector_name }}"
register: ec2
- name: Set redirector_ip for later use
set_fact: