C2重定向基础设施

原名:building-c2-redirector-infrastructure

使用nginx和Apache构建C2重定向器,从Malleable C2配置生成过滤规则,叠加Let's Encrypt TLS,并应用域名前置和UA/地理过滤等OPSEC控制,确保红队C2通过蓝队检测。

分类
开发提效
版本
v1.0
作者
弈韬(@ra1nzzz)
下载
1
收藏
0
发布
2026-08-18
更新
2026-08-21
TRACE 评分
3 / 5

内容概览

Authorized Use Only: This skill is for authorized red-team engagements, adversary-emulation exercises, and defensive research only. Command-and-control infrastructure is dual-use; deploying redirectors to control malware on systems you are not explicitly authorized to test is illegal. Operate only inside an agreed scope with a signed rules-of-engagement document, and decommission infrastructure when the engagement ends. A C2 redirector is an intermediary host that sits between victim implants and the real team server. Beacons connect to the redirector's public domain/IP; the redirector inspects each request and either proxies legitimate C2 traffic back to the hidden team server or diverts everything else (scanners, blue-team analysts, sandboxes) to a benign decoy site. This protects the team server from discovery, takedown, and attribution, and lets operators rotate the public edge witho…

查看 SKILL 详情