56 lines
1.7 KiB
Markdown
56 lines
1.7 KiB
Markdown
---
|
|
title: "[bojemoi] feat(c2): chain complète bojemoi.me:8443 → VPN → lab + Fly.io TCP stream prêt"
|
|
date: 2026-05-01T13:55:02+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit d6145d3 par Betty dans bojemoi"
|
|
author: "Betty"
|
|
---
|
|
|
|
## Commit `d6145d3`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | Betty |
|
|
| **Hash** | `d6145d31a1ae31effb0000facb5b2f532cccfc30` |
|
|
|
|
|
|
### Description
|
|
|
|
Infrastructure C2 :
|
|
- bojemoi.me:8443 : nginx TCP stream relay → VPN (10.8.0.18:4444) → Traefik → msf-teamserver
|
|
- CCD lab-manager : ifconfig-push 10.8.0.18 10.8.0.17 (IP statique)
|
|
- systemd c2-vpn-relay.service : host route + MASQUERADE persistants après reboot
|
|
- uzi : C2_REDIRECTORS=3.74.140.72, LPORT=8443 (bojemoi.me direct)
|
|
|
|
Redirecteur Fly.io (redirector-1) :
|
|
- nginx.conf : ajout stream {} block TCP relay :443 → RELAY_HOST:RELAY_PORT
|
|
- Dockerfile : +libnginx-mod-stream
|
|
- c2-proxy.conf : simplifié (decoy HTTP :80 uniquement, :443 géré par stream)
|
|
- Image buildée localhost:5000/c2-redirector:latest — déploiement Fly.io après fly auth login
|
|
- Quand déployé : C2_REDIRECTORS=37.16.12.4 et LPORT=443
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M redirector/Dockerfile
|
|
M redirector/c2-proxy.conf
|
|
M redirector/nginx.conf
|
|
M stack/40-service-borodino.yml
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
redirector/Dockerfile | 7 +++++--
|
|
redirector/c2-proxy.conf | 34 +---------------------------------
|
|
redirector/nginx.conf | 16 ++++++++++++++++
|
|
stack/40-service-borodino.yml | 9 ++++-----
|
|
4 files changed, 26 insertions(+), 40 deletions(-)
|
|
```
|