n0mad1k
59 lines
2.8 KiB
Django/Jinja
59 lines
2.8 KiB
Django/Jinja
Welcome to your secure FlokiNET C2 Server!
|
|
|
|
╔═══════════════════════════════════════════════╗
|
|
║ OPERATIONAL SECURITY ║
|
|
║ ║
|
|
║ This server has enhanced security features ║
|
|
║ including hardened SSH, Tor routing, and ║
|
|
║ zero-logs configuration. ║
|
|
╚═══════════════════════════════════════════════╝
|
|
|
|
The following tools and utilities have been installed:
|
|
|
|
Apt-Installed Tools:
|
|
--------------------
|
|
- git, wget, curl, unzip
|
|
- python3-pip, python3-venv, pipx
|
|
- tmux, nmap, tcpdump, hydra, john, hashcat
|
|
- sqlmap, gobuster, dirb, enum4linux, dnsenum, seclists, responder
|
|
- golang, proxychains, tor, crackmapexec, jq, unzip
|
|
- postfix, certbot, opendkim, opendkim-tools
|
|
|
|
Pipx-Installed Tools:
|
|
---------------------
|
|
- NetExec: git+https://github.com/Pennyw0rth/NetExec
|
|
- TREVORspray: git+https://github.com/blacklanternsecurity/TREVORspray
|
|
- impacket: (various network protocols and service tools)
|
|
|
|
Custom Tools Installed in ~/Tools:
|
|
----------------------------------
|
|
- SharpCollection: ~/Tools/SharpCollection
|
|
- Kerbrute: ~/Tools/Kerbrute
|
|
- PEASS-ng: ~/Tools/PEASS-ng
|
|
- MailSniper: ~/Tools/MailSniper
|
|
- Inveigh: ~/Tools/Inveigh
|
|
- Gophish: ~/Tools/gophish (unzipped here)
|
|
|
|
Other Installed C2 Frameworks:
|
|
------------------------------
|
|
- Metasploit Framework: system installed (run 'msfconsole')
|
|
- Sliver C2: system installed (run 'sliver')
|
|
|
|
Security Scripts in /opt/c2/:
|
|
-----------------------------
|
|
- clean-logs.sh: Securely clears all logs on the system
|
|
- secure-exit.sh: Perform secure wipe for termination
|
|
- serve-beacons.sh: Hosts generated implants for delivery
|
|
|
|
Also, remember that many reconnaissance and attack tools are now available system-wide due to the apt and pipx installations.
|
|
|
|
Once your DNS record points to this server's public IP, you can obtain a Let's Encrypt certificate by running:
|
|
|
|
sudo certbot certonly --non-interactive --agree-tos --email {{ letsencrypt_email }} --standalone -d {{ c2_subdomain }}.{{ domain }}
|
|
|
|
**IMPORTANT:**
|
|
|
|
To route traffic through Tor for additional anonymity, prefix commands with 'proxychains':
|
|
proxychains curl ifconfig.me
|
|
|
|
Don't forget to set up a DMARC record for your domain. Update your DNS provider's dashboard to add a TXT record named `_dmarc` with a suitable DMARC policy (e.g., `v=DMARC1; p=reject; rua=mailto:admin@{{ domain }}; ruf=mailto:admin@{{ domain }}; pct=100`). This ensures better email deliverability and security for your domain. |