Operator
0799bfbae8
Sanitized version of red team infrastructure automation platform. Operational content (implant pipelines, lures, credential capture) replaced with documented stubs. Architecture and infrastructure automation code intact.
68 lines
1.9 KiB
Django/Jinja
68 lines
1.9 KiB
Django/Jinja
# FlokiNET/templates/proxychains.conf.j2
|
|
# ProxyChains configuration for C2 server
|
|
# Routes traffic through Tor for anonymity
|
|
|
|
# Dynamic chain - Each connection through the proxy list
|
|
# Uses chained proxies in the order they appear in the list
|
|
dynamic_chain
|
|
|
|
# Proxy DNS requests - no leak for DNS data
|
|
proxy_dns
|
|
|
|
# Randomize the order of the proxies on each start
|
|
# random_chain
|
|
|
|
# Set the type of chain (dynamic, strict, random)
|
|
# strict_chain
|
|
# random_chain
|
|
|
|
# Quiet mode (less console output)
|
|
quiet_mode
|
|
|
|
# ProxyList format:
|
|
# type host port [user pass]
|
|
# (values separated by 'tab' or 'blank')
|
|
[ProxyList]
|
|
# add proxy here ...
|
|
# socks5 127.0.0.1 1080
|
|
socks5 127.0.0.1 9050
|
|
|
|
# FlokiNET/templates/iptables-rules.j2
|
|
# Hardened iptables rules for FlokiNET C2 server
|
|
# Applied at system startup
|
|
|
|
*filter
|
|
:INPUT DROP [0:0]
|
|
:FORWARD DROP [0:0]
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
# Allow established and related connections
|
|
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
|
|
|
|
# Allow loopback
|
|
-A INPUT -i lo -j ACCEPT
|
|
|
|
# Allow SSH
|
|
-A INPUT -p tcp -m state --state NEW -m tcp --dport {{ ssh_port | default(22) }} -j ACCEPT
|
|
|
|
# Allow HTTP/HTTPS
|
|
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
|
|
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
|
|
|
|
# Allow Havoc C2 ports
|
|
-A INPUT -p tcp -m state --state NEW -m tcp --dport {{ havoc_http_port | default(8080) }} -j ACCEPT
|
|
-A INPUT -p tcp -m state --state NEW -m tcp --dport {{ havoc_https_port | default(443) }} -j ACCEPT
|
|
-A INPUT -p tcp -m state --state NEW -m tcp --dport {{ havoc_teamserver_port | default(40056) }} -j ACCEPT
|
|
|
|
# Allow shell handler port
|
|
{% if shell_handler_port is defined %}
|
|
-A INPUT -p tcp -m state --state NEW -m tcp --dport {{ shell_handler_port }} -j ACCEPT
|
|
{% endif %}
|
|
|
|
# Block all other incoming traffic
|
|
-A INPUT -j DROP
|
|
|
|
# Allow all outbound traffic by default
|
|
-A OUTPUT -j ACCEPT
|
|
|
|
COMMIT |