C2 Redirectors

[notactive]

Hello! This might not be the perfect place for this question, but I was wondering if there are any resources/ threads available that provide a step-by-step guide on setting up a C2 server with domain fronting, redirectors, and similar techniques (including where and how to get/ buy a domain)?

 

[toxella]

GitHub - D00Movenok/BounceBack: ↕️🤫 Stealth redirector for your red team operation security

↕️🤫 Stealth redirector for your red team operation security - D00Movenok/BounceBack

github.com

GitHub - wikiZ/RedGuard: RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check. - wikiZ/RedGuard

github.com

 

[viktorramakov]

Re-directors are easy. Create two servers. One with your C2, open the ports you want with ufw. Like 80 and 443 etc. Then in your redirector server add these IP table rules:

iptables -I INPUT -p tcp -m tcp --dport Port -j ACCEPT
iptables -t nat -A PREROUTING -p tcp --dport Port -j DNAT --to-destination C2server:Port
iptables -t nat -A POSTROUTING -j MASQUERADE
iptables -I FORWARD -j ACCEPT
iptables -P FORWARD ACCEPT
sysctl net.ipv4.ip_forward=1

Then in C2, Cobalt for example, use the redirector IP for all listeners and beacons etc