In the root CALDERA directory, navigate to plugins/ssl. Note: OpenSSL must be installed on your system to generate a new self-signed certificate The directions below show how to generate a new self-signed certificate. In order to use this plugin securely, you need to generate your own certificate. Warning: This plugin uses a default self-signed ssl certificate and key which should be replaced. If a self-signed certificate is used, deploying agents may require additional commands to disable SSL certificate checks. The address will not automatically populate in the agent deployment menu. Plugins and agents will not automatically update to the service at All agents will need to be redeployed using the HTTPS address to use the secure protocol. When this plugin has been loaded, CALDERA will start the HAProxy service on the machine and serve CALDERA on all interfaces on port 8443, in addition to the normal (based on the value of the host value in the CALDERA settings). It requires HaProxy (>= 1.8) to be installed prior to using it. This plugin only works if CALDERA is running on a Linux or MacOS machine. Shared extension provides the C sharing functionality for Sandcat. Proxy_smb_pipe extension provides the SmbPipe peer-to-peer proxy client and receiver for Windows (peer-to-peerĭonut extension provides the Donut functionality to execute various assemblies in memory. Proxy_http extension provides the HTTP peer-to-peer proxy receiver. Shellcode extension provides the shellcode executors. Shells extension provides the osascript (Mac Osascript) and pwsh (Windows powershell core) executors. Gist extension provides the Github gist C2 contact protocol.
Proc executor to directly spawn processes from executables without needing to invoke a shell (Windows/Linux/Mac)Īdditional functionality can be found in the following gocat extensions: The following features are included in the stock agent: $wc.DownloadFile($url,$output) # download
$output="C:\Users\Public\sandcat.exe" # specify destination filename $wc.Headers.add("gocat-extensions","proxy_http,shells") # requesting the extensions $wc.Headers.add("file","sandcat.go") # requesting sandcat binary $wc.Headers.add("platform","windows") # specifying Windows build $url="" # change server IP/port as needed
0 kommentar(er)
