Reverse Proxying Attacker Tools

Ever want to have all of your C2 go to the same box, have the functionality of Meterpreter, and Empire, while making it so if anyone goes to the actual site of your C2 all they get is something like Google?
 
 Nginx makes that possible, and instead of making a blog post that will disappear, I’ll point you at my combo in my “Attacker Knowledge Base” site:
 
 https://attackerkb.com/Combinations/ReverseProxyAttackTools
 
 and instead, show you the results once it’s setup:
 
Metasploit:

Empire:

And this is what happens if “they” try and use Google:


Originally published at www.room362.com on December 31, 2015.