SkyFall-Pack

Your Skyfall Infrastructure Pack

Description

SkyFall-Pack is an infrastructure automation pack for C2 operations. It leverages Cloudflare Workers as redirectors and an Azure VM as the teamserver.

The following list explains the meaning of each pack:

• Workers-Pack: A Go-based pack that automates the generation of wrangler.jsonc and index.js.
• Scripts-Pack: Bash scripts that initiate and configure the process.
• Terraform-Pack: A Terraform pack that contains all the code for deploying the Azure VM.
• Ansible-Pack: An Ansible pack that contains all the code for configuring the Azure VM.

If you find any bugs, don’t hesitate to report them. Your feedback is valuable in improving the quality of this project!

Disclaimer

The authors and contributors of this project are not liable for any illegal use of the tool. It is intended for educational purposes only. Users are responsible for ensuring lawful usage.

Table of Contents

• SkyFall-Pack
  • Description
  • Disclaimer
  • Table of Contents
  • Acknowledgement
  • Installation
  • Usage
  • References

Acknowledgement

This project created with ❤️ by @nickvourd && @kavasilo.

Special thanks to @kyleavery_ for all the valuable tips.

Special thanks to my friend Juan Martinez Moreno for all the contributions.

Installation

Install the following dependencies on your local machine.

For Linux:

sudo apt install terraform npm ansible golang azure-cli -y

For Mac:

brew install terraform azure-cli node wrangler ansible go

Usage

Authentication

• Cloudflare

npm exec wangler login

• Azure

az login

Build Infra

• Clone The Project

git clone https://github.com/nickvourd/SkyFall-Pack.git

• Azure VM (Team Server)

./Scripts-Pack/setup.sh -l <location> -u <username> -n <resource_group_name> -s <ssh_filename> -d <dns_name> -v <vm_size>

• Configure Azure VM (Team Server)

./Scripts-Pack/run_ansible.sh -f <keystore_filename> -p <password> -c <custom_header> -s <secret_value> [--http]

• Cloudflare Worker

npm create cloudflare

• Configure Cloudflare Worker (Execute this on your local machine)

./WorkerMan build -t <teamserver_hostname> -w <worker_hostname> -c <custom_header> -s <secret_value>

⚠️ Copy wrangler.jsonc and index.js to the appropriate directories.

• Deploy Wrangler (execute from the Worker project's root directory)

npm exec wrangler deploy

References

• (Re)visiting Cloudflare Workers for C2 by Marcello
• Using Cloudflare Workers as Redirectors
• Putting the C2 in C2loudflare by JUMPSEC Labs