n0mad1k
66 lines
2.4 KiB
YAML
66 lines
2.4 KiB
YAML
---
|
|
# tasks/port_randomization.yml
|
|
# Task file to randomize ports for C2 infrastructure
|
|
|
|
- name: Create port randomization script
|
|
copy:
|
|
src: "../files/randomize_ports.sh"
|
|
dest: "/root/Tools/randomize_ports.sh"
|
|
mode: '0700'
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Execute port randomization script
|
|
shell: |
|
|
cd /root/Tools && ./randomize_ports.sh
|
|
register: randomize_result
|
|
when: randomize_ports | default(true) | bool
|
|
|
|
- name: Display port randomization results
|
|
debug:
|
|
msg: "{{ randomize_result.stdout_lines }}"
|
|
when: randomize_ports | default(true) | bool
|
|
|
|
- name: Store randomized ports in variables
|
|
shell: |
|
|
PORT_CONFIG="/root/Tools/port_config.json"
|
|
if [ -f "$PORT_CONFIG" ]; then
|
|
cat "$PORT_CONFIG"
|
|
else
|
|
echo '{"error": "Port configuration not found"}'
|
|
fi
|
|
register: port_config_result
|
|
when: randomize_ports | default(true) | bool
|
|
|
|
- name: Set port fact variables
|
|
set_fact:
|
|
randomized_http_port: "{{ (port_config_result.stdout | from_json).http_c2_port | default(8888) }}"
|
|
randomized_https_port: "{{ (port_config_result.stdout | from_json).https_c2_port | default(443) }}"
|
|
randomized_mtls_port: "{{ (port_config_result.stdout | from_json).mtls_c2_port | default(31337) }}"
|
|
randomized_shell_handler_port: "{{ (port_config_result.stdout | from_json).shell_handler_port | default(shell_handler_port) }}"
|
|
when: randomize_ports | default(true) | bool and port_config_result.rc == 0
|
|
|
|
- name: Update shell handler configuration with randomized port
|
|
replace:
|
|
path: "/root/Tools/shell-handler/persistent-listener.sh"
|
|
regexp: "LISTEN_PORT=.*"
|
|
replace: "LISTEN_PORT={{ randomized_shell_handler_port | default(shell_handler_port) }}"
|
|
when: randomize_ports | default(true) | bool and port_config_result.rc == 0
|
|
|
|
- name: Update shell handler service with randomized port
|
|
lineinfile:
|
|
path: "/etc/systemd/system/shell-handler.service"
|
|
regexp: 'Environment="LISTEN_PORT='
|
|
line: 'Environment="LISTEN_PORT={{ randomized_shell_handler_port | default(shell_handler_port) }}"'
|
|
insertafter: '^\\[Service\\]'
|
|
when: randomize_ports | default(true) | bool and port_config_result.rc == 0
|
|
|
|
- name: Reload and restart services
|
|
systemd:
|
|
daemon_reload: yes
|
|
name: "{{ item }}"
|
|
state: restarted
|
|
with_items:
|
|
- sliver
|
|
- shell-handler
|
|
when: randomize_ports | default(true) | bool and port_config_result.rc == 0 |