Command & Control (C2)

Creates a C2 server of the provider of choice on the cloud. The types available are HTTP/DNS.

Variable	Required	Description
id	N/A	Module ID Autogenerated
type	Yes	Type of c2 Accepted values are: HTTP/DNS.
provider	Yes	Provider to be used
distro	Yes	Distro to be used
region	Yes	Regions to create server instance
size	Yes	Instance size to launch
redirectors	Yes	Number of redirectors to launch for each c2. It can be 0.
tools	No	Tools to be installed on instance creation.

• The distros currently supported are:

  • AWS: debian, ubuntu, kali - To make kali and ubuntu work you should visit the following links on the AWS marketplace and subscribe to the specified distros:
    • https://aws.amazon.com/marketplace/server/procurement?productId=8b7fdfe3-8cd5-43cc-8e5e-4e0e7f4139d5
    • https://aws.amazon.com/marketplace/server/procurement?productId=aced0818-eef1-427a-9e04-8ba38bada306
  • Digitalocean: debian, ubuntu

• The tools which are currently available for automatic installation on the C2 servers are the following:

  • metasploit
  • empire
  • dnscat2
  • silenttrinity
  • godoh
  • cobaltstrike (The CSTRIKE_KEY variable has to be set in the ./redbaron/data/scripts/tools/cobaltstrike.sh script)
  • The PenTesters Framework (PTF) (A library of penetration testing tools. You can modify what you want to install by changing the ./redbaron/data/scripts/tools/ptf.sh script. For more information about the project visit: https://github.com/trustedsec/ptf)