n0mad1k
64 lines
3.1 KiB
Django/Jinja
64 lines
3.1 KiB
Django/Jinja
Welcome to your secure FlokiNET C2 Server!
|
||
|
||
╔═══════════════════════════════════════════════╗
|
||
║ OPERATIONAL SECURITY ║
|
||
║ ║
|
||
║ This server has enhanced security features ║
|
||
║ including hardened SSH, Tor routing, and ║
|
||
║ zero-logs configuration. ║
|
||
╚═══════════════════════════════════════════════╝
|
||
|
||
The following tools and utilities have been installed:
|
||
|
||
Apt-Installed Tools:
|
||
--------------------
|
||
- git, wget, curl, unzip
|
||
- python3-pip, python3-venv, pipx
|
||
- tmux, nmap, tcpdump, hydra, john, hashcat
|
||
- sqlmap, gobuster, dirb, enum4linux, dnsenum, seclists, responder
|
||
- golang, proxychains, tor, crackmapexec, jq, unzip
|
||
- postfix, certbot, opendkim, opendkim-tools
|
||
|
||
Pipx-Installed Tools:
|
||
---------------------
|
||
- NetExec: git+https://github.com/Pennyw0rth/NetExec
|
||
- TREVORspray: git+https://github.com/blacklanternsecurity/TREVORspray
|
||
- impacket: (various network protocols and service tools)
|
||
|
||
Custom Tools Installed in ~/Tools:
|
||
----------------------------------
|
||
- SharpCollection: ~/Tools/SharpCollection
|
||
- Kerbrute: ~/Tools/Kerbrute
|
||
- PEASS-ng: ~/Tools/PEASS-ng
|
||
- MailSniper: ~/Tools/MailSniper
|
||
- Inveigh: ~/Tools/Inveigh
|
||
- Gophish: ~/Tools/gophish (unzipped here)
|
||
|
||
Other Installed C2 Frameworks:
|
||
------------------------------
|
||
- Metasploit Framework: system installed (run 'msfconsole')
|
||
- Havoc C2: installed in /root/Tools/havoc
|
||
|
||
Security Scripts in /root/Tools/:
|
||
-----------------------------
|
||
- clean-logs.sh: Securely clears all logs on the system
|
||
- secure-exit.sh: Perform secure wipe for termination
|
||
- serve-beacons.sh: Hosts generated implants for delivery
|
||
|
||
Also, remember that many reconnaissance and attack tools are now available system-wide due to the apt and pipx installations.
|
||
|
||
Once your DNS record points to this server’s public IP, you can obtain a Let’s Encrypt certificate by running:
|
||
|
||
sudo certbot certonly --non-interactive --agree-tos --email {{ letsencrypt_email }} --standalone -d {{ domain }}
|
||
sudo certbot certonly --non-interactive --agree-tos --email {{ letsencrypt_email }} --standalone -d mail.{{ domain }}
|
||
sudo certbot certonly --non-interactive --agree-tos --email {{ letsencrypt_email }} --standalone -d tracker.{{ domain }}
|
||
systemctl start nginx.service
|
||
|
||
Remember to ensure your DNS is set correctly before running the above command.
|
||
|
||
**IMPORTANT:**
|
||
|
||
To route traffic through Tor for additional anonymity, prefix commands with 'proxychains':
|
||
proxychains curl ifconfig.me
|
||
|
||
Don't forget to set up a DMARC record for your domain. Update your DNS provider's dashboard to add a TXT record named `_dmarc` with a suitable DMARC policy (e.g., `v=DMARC1; p=reject; rua=mailto:admin@{{ domain }}; ruf=mailto:admin@{{ domain }}; pct=100`). This ensures better email deliverability and security for your domain. |