redirect-lib

KO | EN

gitlite — search

#javascript #android #machine-learning #docker #macos #java #awesome #awesome-list #vue #pytorch #ios #mcp #openai #open-source

(★ 25)

Library of traffic redirectors

redirect-lib 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# C&C Redirectors Library

Library of **command and control traffic redirectors**, used in redteam engagements.

This project aim to gather methods to redirect traffic (HTTP/S, DNS) to another server. This capability is usefull to hide a server IP and bring flexibility. If the redirector is identified and blocked by defenders, a new one can be setup more easily than a full C&C server.

Having multiple methods enable the redteam to gain flexibility, adapt to different situation and better emulate real adversary.

Each documented redirection method is in a dedicated directory.

## Categories

Redirectors has following attributes:

| Attribute      | Description                                                                                       | Possible values                                                        |
| -------------- | ------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------- |
| Type           | Is it a smart or dumb redirector ? Is it able to apply conditionnal filtering/redirection rules ? | `smart`, `dumb`                                                        |
| Subtype        | Give more details on the redirector                                                               | `command line`, `web server`, `function`, `service to configure`, etc. |
| Automated      | Is the deployement process automated ?                                                            | `yes`, `no`                                                            |
| Keep Origin IP | Does the redirecter keep in any way the client IP and is able to tranfer it to the C2 ?           | `yes`, `no`                                                            |
| Decrypt        | Does the redirector needs to decrypt the trafic and thus exposing data to the provider ?          | `yes`, `no`                                                            |

## Automation

Automated solution make use of `terraform` and `ansible` when needed and possible.

Ansible config suppose you use `root` or a user able to become `root`.

### Terraform

To deploy a redirector, `cd` in the `terraform` directory corresponding to the desire method and then:

```bash
terraform init
cp templates.tfvars my_redirector.tfvars

# Edit my_redirector.tfvars

terraform apply --var-file my_redirector.tfvars
```

Automation is done (when it is) to host the redirector on **AWS** (for redirector type such as `web server` or `command line`).

## 💰 Pricing 💰

One of the goal of this project is to find cheap solutions. Feel free to propose any improvment to reduce the cost of a solution. Average cost of solutions are around 5$/month. Nonetheless, as price may vary no cost estimation is done per solution.

:warning: Be carefull with solution with a "pay per request" pricing. As you may use your redirector heavily at some point (ex. Cobalt Strike in interactive mode), cost can rise rapidly.

Tips : Doing 4 requests per second, during a month will result in 10 368 000 request per month.

If you don't need much, you may even stay under the "Free Tier" or "developper" offers threshold and not pay anything.

## Comments

Some global recommendations/comments:

- As you may notice, cloud instance choosen in automation are the smallest ones. You only need to redirect HTTP/S requests. If you find cheapest/smallest solutions, feel free to open an issue.

## Status

| Method                   | Documented         | Ansible            | Terraform          |
| ------------------------ | ------------------ | ------------------ | ------------------ |
| `socat`                  | :white_check_mark: | :white_check_mark: | :white_check_mark: |
| `ssh`                    | :white_check_mark: | :white_check_mark: | :white_check_mark: |
| `iptables`               | :white_check_mark: | :white_check_mark: | :white_check_mark: |
| `apache`                 | :white_check_mark: | :white_check_mark: | :white_check_mark: |
| `nginx`                  | :white_check_mark: | :white_check_mark: | :white_check_mark: |
| `haproxy`                | :white_check_mark: | :white_check_mark: | :white_check_mark: |
| `traefik`                | :white_check_mark: | :white_check_mark: | :white_check_mark: |
| `cloudflare-workers`     | :white_check_mark: | N/A                | :white_check_mark: |
| `azure-cdn`              | :white_check_mark: | N/A                | :white_check_mark: |
| `aws-cloudfront`          | :white_check_mark: | N/A                | :white_check_mark: |
| `azure-functions`        | :x:                | N/A                | :x:                |
| `cloudflare-cdn`         | :x:                | N/A                | :x:                |
| `azure-functions`        | :x:                | N/A                | :x:                |
| `google-cloud-functions` | :x:                | N/A                | :x:                |
| `aws-lambda`             | :x:                | N/A                | :x:                |
| `go-proxy`               | :x:                | :x:                | :x:                |

## Ideas / Possible candidates for integration

Here is the following ideas/candidates I have not yet explore:

- Netlify CDN
- [tinyproxy](https://github.com/tinyproxy/tinyproxy)
- [mitmproxy](https://mitmproxy.org/)

## Resources

- [HTTPS Payload and C2 Redirectors](https://posts.specterops.io/https-payload-and-c2-redirectors-ff8eb6f87742)

redirect-lib

redirect-lib 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

redirect-lib

redirect-lib 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README