Operator
98103466d8
Sanitized version of red team infrastructure automation platform. Operational content (implant pipelines, lures, credential capture) replaced with documented stubs. Architecture and infrastructure automation code intact.
64 lines
3.1 KiB
Django/Jinja
64 lines
3.1 KiB
Django/Jinja
Welcome to your secure FlokiNET C2 Server!
|
||
|
||
╔═══════════════════════════════════════════════╗
|
||
║ OPERATIONAL SECURITY ║
|
||
║ ║
|
||
║ This server has enhanced security features ║
|
||
║ including hardened SSH, Tor routing, and ║
|
||
║ zero-logs configuration. ║
|
||
╚═══════════════════════════════════════════════╝
|
||
|
||
The following tools and utilities have been installed:
|
||
|
||
Apt-Installed Tools:
|
||
--------------------
|
||
- git, wget, curl, unzip
|
||
- python3-pip, python3-venv, pipx
|
||
- tmux, nmap, tcpdump, hydra, john, hashcat
|
||
- sqlmap, gobuster, dirb, enum4linux, dnsenum, seclists, responder
|
||
- golang, proxychains, tor, crackmapexec, jq, unzip
|
||
- postfix, certbot, opendkim, opendkim-tools
|
||
|
||
Pipx-Installed Tools:
|
||
---------------------
|
||
- NetExec: git+https://github.com/Pennyw0rth/NetExec
|
||
- TREVORspray: git+https://github.com/blacklanternsecurity/TREVORspray
|
||
- impacket: (various network protocols and service tools)
|
||
|
||
Custom Tools Installed in ~/Tools:
|
||
----------------------------------
|
||
- SharpCollection: ~/Tools/SharpCollection
|
||
- Kerbrute: ~/Tools/Kerbrute
|
||
- PEASS-ng: ~/Tools/PEASS-ng
|
||
- MailSniper: ~/Tools/MailSniper
|
||
- Inveigh: ~/Tools/Inveigh
|
||
- Gophish: ~/Tools/gophish (unzipped here)
|
||
|
||
Other Installed C2 Frameworks:
|
||
------------------------------
|
||
- Metasploit Framework: system installed (run 'msfconsole')
|
||
- Havoc C2: installed in /root/Tools/Havoc
|
||
|
||
Security Scripts in /root/Tools/:
|
||
-----------------------------
|
||
- clean-logs.sh: Securely clears all logs on the system
|
||
- secure-exit.sh: Perform secure wipe for termination
|
||
- serve-beacons.sh: Hosts generated implants for delivery
|
||
|
||
Also, remember that many reconnaissance and attack tools are now available system-wide due to the apt and pipx installations.
|
||
|
||
Once your DNS record points to this server’s public IP, you can obtain a Let’s Encrypt certificate by running:
|
||
|
||
sudo certbot certonly --non-interactive --agree-tos --email {{ letsencrypt_email }} --standalone -d {{ domain }}
|
||
sudo certbot certonly --non-interactive --agree-tos --email {{ letsencrypt_email }} --standalone -d mail.{{ domain }}
|
||
sudo certbot certonly --non-interactive --agree-tos --email {{ letsencrypt_email }} --standalone -d tracker.{{ domain }}
|
||
systemctl start nginx.service
|
||
|
||
Remember to ensure your DNS is set correctly before running the above command.
|
||
|
||
**IMPORTANT:**
|
||
|
||
To route traffic through Tor for additional anonymity, prefix commands with 'proxychains':
|
||
proxychains curl ifconfig.me
|
||
|
||
Don't forget to set up a DMARC record for your domain. Update your DNS provider's dashboard to add a TXT record named `_dmarc` with a suitable DMARC policy (e.g., `v=DMARC1; p=reject; rua=mailto:admin@{{ domain }}; ruf=mailto:admin@{{ domain }}; pct=100`). This ensures better email deliverability and security for your domain. |