C2 Infrastructure

Password: hsaad.gitbook.io

C2 Behavior

C2 Profile Template

> global options
> https-certificate (optional)
> http-get
    - client
        * metadata
    - server
        * output
> http-post
    - client
        * id
        * output
    - server
        * output
> http-stager

1KB

Profile.rar

Open

Password: hsaad.gitbook.io

C2 Profile Testing

./c2lint Profile.txt

Change Default Port

sed 's/50050/22222/' teamserver > tmp; mv tmp teamserver

Run Cobalt Strike

./teamserver 192.168.1.100 P@ssw0rd Profile.txt

C2 Redirector

socat TCP4-LISTEN:80,fork TCP4:192.168.2.100:80