17.5.26

Havoc C2-docker



Havoc_Project/Havoc

Havoc_Project/Dockerfile

Havoc_Project/docker-compose.yml

Havoc_Project/profiles/havoc.yaotl

git clone https://github.com/HavocFramework/Havoc.git cd Havoc #自行下載

Client端請自行架設

--------------------------------------------------------------------------------------------------------


# profiles/havoc.yaotl


Teamserver {

    Host = "0.0.0.0"

    Port = 40056


    Build {

        Compiler64 = "/usr/bin/x86_64-w64-mingw32-gcc"

        Compiler86 = "/usr/bin/i686-w64-mingw32-gcc"

        Nasm       = "/usr/bin/nasm"

    }

}


Operators {

    user "neo" {

        Password = "MySecureC2Password123!" 

    }

}


Demon {

    Sleep  = 5

    Jitter = 15

    TrustXForwardedFor = false


    Injection {

        Spawn64 = "C:\\Windows\\System32\\notepad.exe"

        Spawn32 = "C:\\Windows\\SysWOW64\\notepad.exe"

    }

}

-----------------------------------------------------------------------------------------------------------

docker-compose.yml

--------------------------------------------------------------------------------------------------------

version: '3.8'


services:

  havoc-teamserver:

    build:

      context: .

      dockerfile: Dockerfile

    container_name: havoc-teamserver

    restart: unless-stopped

    ports:

      - "40056:40056"

      - "80:80"

      - "443:443"

    volumes:

      - ./profiles:/app/profiles

      - ./data:/app/data          

    networks:

      - c2-network


networks:

  c2-network:

    driver: bridge

-------------------------------------------------------------------------------------------------------------------------

Dockerfile

---------------------------------------------------------------------------------------------------------------


FROM golang:1.21-bookworm


RUN apt-get update && apt-get install -y \

    mingw-w64 \

    nasm \

    build-essential \

    && rm -rf /var/lib/apt/lists/*


WORKDIR /app


COPY ./Havoc /app


RUN mkdir -p /app/data /app/profiles


ENV GOPROXY=https://goproxy.io,direct


WORKDIR /app/teamserver

RUN go mod download

RUN go build -o /app/havoc-backend main.go


WORKDIR /app


EXPOSE 40056 80 443


ENTRYPOINT ["./havoc-backend", "server", "--profile", "/app/profiles/havoc.yaotl", "--debug"]

沒有留言:

張貼留言