800+ IT
News
als RSS Feed abonnieren๐ Redcloud - Automated Red Team Infrastructure Deployement Using Docker
๐ก Newskategorie: IT Security Nachrichten
๐ Quelle: feedproxy.google.com
Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface.
Ideal for your penetration tests, shooting ranges, red teaming and bug bounties!
Self-host your attack infrastructure painlessly, deploy your very own live, scalable and resilient offensive infrastructure in a matter of minutes.
Demo
The following demo showcases deployment of Redcloud through ssh, followed by Metasploit. We then look at Traefik and a live volume attached to Metasploit. Finally, we check that Metasploit's DB is functional with the web terminal, delete the container, and terminate Redcloud.
Features
- Deploy Redcloud locally or remotely using the built-in SSH functions, and even docker-machine.
- Deploy Metasploit, Empire, GoPhish, vulnerable targets, a fully stacked Kali, and many more with a few clicks.
- Monitor and manage your infrastructure with a beautiful web interface.
- Deploy redirections, socks or Tor proxy for all your tools.
- Painless network management and volume sharing.
- User and password management.
- Web terminal
- Overall very comfy
Quick Start
Setup:
# If deploying using ssh
> cat ~/.ssh/id_rsa.pub | ssh root@your-deploy-target-ip 'cat >> .ssh/authorized_keys'
# If deploying using docker-machine, and using a machine named "default"
> eval (docker-machine env default)
# Check your Python version
# Use python3 if default python version is 2.x
> python --version
Deploy:
> git clone https://github.com/khast3x/redcloud.git
> cd redcloud
> python redcloud.pyRedcloud uses PyYAML to print the list of available templates. It's installed by default on most systems.
If not, simply run:
# Use pip3 if default python version is 2.x
> pip install -r requirements.txtRedcloud has 3 different deployment methods:
- Locally
- Remotely, using ssh. Requires having your public key in your target's
authorized_keysfile. - Remotely, using docker-machine. Run the
eval (docker-machine env deploy_target)line to preload your env with your docker-machine, and runredcloud.py. Redcloud should automatically detect your docker-machine, and highlight menu items relevant to a docker-machine deployment.
Templates
Briefly,
redcloud.py deploys a Portainer stack, preloaded with many tool templates for your offensive engagements, powered by Docker. Once deployed, control Redcloud with the web interface. Uses Traefik as reverse-proxy. Easy remote deploy to your target server using the system ssh or docker-machine.
- ๏Ever wanted to spin up a Kali in a cloud with just a few clicks?
- ๏ฆHave clean silos between your tools, technics and stages?
- ๏Monitor the health of your scans and C2?
- ๏ฅSkip those sysadmin tasks for setting up a phishing campaign and get pwning faster?
- ๏Curious how you would build the ideal attack infrastructure?
Use the web UI to monitor, manage, and interact with each container. Use the snappy web terminal just as you would with yours. Create volumes, networks and port forwards using Portainer's simple UI.
Deploy and handle all your favorite tools and technics with the power of data-center-grade internet
- Deploying a container
ย
- Using Metasploit's
msfconsolethrough the web interface
ย
- Traefik real-time data on reverse-proxy routes
- Deploying using ssh
