diff --git a/README.md b/README.md index 8f820b5..a1953a5 100644 --- a/README.md +++ b/README.md @@ -4,6 +4,8 @@ **Let's raise the bar in C2 redirectors IR resiliency, shall we?** +![RedWarden](images/0.png) + Red Teaming business has seen [several](https://bluescreenofjeff.com/2016-04-12-combatting-incident-responders-with-apache-mod_rewrite/) [different](https://posts.specterops.io/automating-apache-mod-rewrite-and-cobalt-strike-malleable-c2-profiles-d45266ca642) [great](https://gist.github.com/curi0usJack/971385e8334e189d93a6cb4671238b10) ideas on how to combat incident responders and misdirect them while offering resistant C2 redirectors network at the same time. This work combines many of those great ideas into a one, lightweight utility, mimicking Apache2 in it's roots of being a simple HTTP(S) reverse-proxy. @@ -433,7 +435,7 @@ If you want to see your requests and responses full bodies - set `debug` and `tr ## Known Issues -- It _may_ add extra overhead to the interactive sleep speeds, effectively slowing down socks proxying +- It _may_ add a slight overhead to the interactive sleep throughput - ProxyPass processing logic is far from perfect and is _really_ buggy (and oh boy its ugly!). - Weird forms of configuration files can derail RedWarden parser and make it complain. Easiest approach to overcome this would be to copy `example-config.yaml` on work on it instead. diff --git a/example-config.yaml b/example-config.yaml index 5d740ca..3f2b9b1 100644 --- a/example-config.yaml +++ b/example-config.yaml @@ -106,11 +106,11 @@ log_dropped: False # # Default: # log_request_delay: 60 -# requests_threshold: 5 +# requests_threshold: 3 # throttle_down_peer_logging: log_request_delay: 60 - requests_threshold: 5 + requests_threshold: 3 # diff --git a/images/0.png b/images/0.png new file mode 100644 index 0000000..6e176b1 Binary files /dev/null and b/images/0.png differ diff --git a/plugins/malleable_redirector.py b/plugins/malleable_redirector.py index c664532..b885b68 100644 --- a/plugins/malleable_redirector.py +++ b/plugins/malleable_redirector.py @@ -360,7 +360,7 @@ class AlterHostHeader(Exception): 'throttle_down_peer_logging' : { 'log_request_delay': 60, - 'requests_threshold': 5 + 'requests_threshold': 3 }, 'add_peers_to_whitelist_if_they_sent_valid_requests' : {