Automating C2 Infrastructure with Terraform, Nebula, Caddy and Cobalt Strike

Read Article

The ability to quickly build out a C2 infrastructure within a few minutes, including all the set up and tear down logic included would be a great asset for any offensive security group or operator.  In this post, I will show exactly how to build a fully automated functional C2 infrastructure using TerraformNebulaCaddy and Cobalt Strike.

Special thanks to both @byt3bl33d3r and @bin3xish477 for bringing Caddy to my attention as a possible replacement for Nginx/Apache.

TL;DR

If reading all the content below is too hard for you 🙂 you can simply skim the paper and check the git repo below if you are only interested in the code.