1.7 KiB
1.7 KiB
title, date, draft, tags, categories, summary, author
| title | date | draft | tags | categories | summary | author | ||||
|---|---|---|---|---|---|---|---|---|---|---|
| [bojemoi] feat(c2): chain complète bojemoi.me:8443 → VPN → lab + Fly.io TCP stream prêt | 2026-05-01T13:55:02+02:00 | false |
|
|
Commit d6145d3 par Betty dans bojemoi | Betty |
Commit d6145d3
| Repository | bojemoi |
| Branch | main |
| Author | Betty |
| Hash | d6145d31a1ae31effb0000facb5b2f532cccfc30 |
Description
Infrastructure C2 :
- bojemoi.me:8443 : nginx TCP stream relay → VPN (10.8.0.18:4444) → Traefik → msf-teamserver
- CCD lab-manager : ifconfig-push 10.8.0.18 10.8.0.17 (IP statique)
- systemd c2-vpn-relay.service : host route + MASQUERADE persistants après reboot
- uzi : C2_REDIRECTORS=3.74.140.72, LPORT=8443 (bojemoi.me direct)
Redirecteur Fly.io (redirector-1) :
- nginx.conf : ajout stream {} block TCP relay :443 → RELAY_HOST:RELAY_PORT
- Dockerfile : +libnginx-mod-stream
- c2-proxy.conf : simplifié (decoy HTTP :80 uniquement, :443 géré par stream)
- Image buildée localhost:5000/c2-redirector:latest — déploiement Fly.io après fly auth login
- Quand déployé : C2_REDIRECTORS=37.16.12.4 et LPORT=443
Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com
Files Changed
M redirector/Dockerfile
M redirector/c2-proxy.conf
M redirector/nginx.conf
M stack/40-service-borodino.yml
Diff Summary
redirector/Dockerfile | 7 +++++--
redirector/c2-proxy.conf | 34 +---------------------------------
redirector/nginx.conf | 16 ++++++++++++++++
stack/40-service-borodino.yml | 9 ++++-----
4 files changed, 26 insertions(+), 40 deletions(-)