REDIRECTORS
redirectors are intermediary systems or services that forward traffic to/from destinations. it allows actors to mask the origin and destination of the traffic. redirectors can be used to improve operational security (OPSEC), evade detection and ensures persistence. depending on the configuration, redirectors can route traffic the C2 Server or the Payload/Malware Server, etc.
IMPLEMENTATION
AWS CLOUDFRONT
Create the C2 Server
Create the Elastic Load Balancer (ELB)
Configure the ELB to send its traffic to the C2 Server
Configure the C2 Server to accept traffic coming from the ELB
Create the Redirector last as it requires the ELB Origin Domain
this notifies the redirector where to send its traffic
AZURE FRONT DOOR
Create the C2 Server
Create the Azure Front Door & CDN (redirector)
Configure the redirector to pass traffic to the C2 Server
Configure the C2 Server to accept and pass traffic to the redirector
NGINX
Last updated