The following demo showcases deployment of Redcloud through ssh, followed by Metasploit. We then look at Traefik and a live volume attached to Metasploit. Finally, we check that Metasploit's DB is functional with the web terminal, delete the container, and terminate Redcloud.
Features
Deploy Redcloud locally or remotely using the built-in SSH functions, and even docker-machine. Deploy Metasploit, Empire, GoPhish, vulnerable targets, a fully stacked Kali, and many more with a few clicks. Monitor and manage your infrastructure with a beautiful web interface. Deploy redirections, socks or Tor proxy for all your tools. Painless network management and volume sharing. User and password management. Web terminal Overall very comfy
Quick Start
Setup: # If deploying using ssh
> cat ~/.ssh/id_rsa.pub | ssh root@your-deploy-target-ip 'cat >> .ssh/authorized_keys'

# If deploying using docker-machine, and using a machine named "default"
> eval (docker-machine env default)

# Check your Python version
# Use python3 if default python version is 2.x
> python --version
Deploy: > git clone https://github.com/khast3x/redcloud.git
> cd redcloud
> python redcloud.py Redcloud uses PyYAML to print the list of available templates. It's installed by default on most systems.
If not, simply run: # Use pip3 if default python version is 2.x
> pip install -r requirements.txt Redcloud has 3 different deployment methods: Locally Remotely, using ssh. Requires having your public key in your target's authorized_keys file. Remotely, using docker-machine. Run the eval (docker-machine env deploy_target) line to preload your env with your docker-machine, and run redcloud.py. Redcloud should automatically detect your docker-machine, and highlight menu items relevant to a docker-machine deployment.
Templates

Briefly, redcloud.py deploys a Portainer (https://www.portainer.io/) stack, preloaded with many tool templates for your offensive engagements, powered by Docker. Once deployed, control Redcloud with the web interface (https://github.com/khast3x/Redcloud#screenshots). Uses Traefik (https://traefik.io/) as reverse-proxy. Easy remote deploy to your target server using the system ssh or docker-machine.  Ever wanted to spin up a Kali in a cloud with just a few clicks?  Have clean silos between your tools, technics and stages?  Monitor the health of your scans and C2?  Skip those sysadmin tasks for setting up a phishing campaign and get pwning faster?  Curious how you would build the ideal attack infrastructure? Use the web UI to monitor, manage, and interact with each container. Use the snappy web terminal just as you would with yours. Create volumes, networks and port forwards using Portainer's simple UI. Deploy and handle all your favorite tools and technics with the power of data-center-grade internet
ScreenshotsDeploying a container

  Using Metasploit's msfconsole through the web interface

  Traefik real-time data on reverse-proxy routes

Deploying using ssh

Download Redcloud (https://github.com/khast3x/Redcloud)

Kali Linux Tutorials
Android_Hid : Use Android As Rubber Ducky Against Another Android Device

Android_Hid is a tool used by android as Rubber Ducky against targeted Android device or PC. HID Attack Using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it is […]

The post Android_Hid : Use Android As Rubber Ducky Against Another Android Device appeared first on Kali Linux Tutorials.

Hacking on Medium
Amstrong CTF Spoofy Challenge Write Up Step By Step [English But BAD]

So, after I think again it looks like I need to make this article, because in the video below, I don’t just get the right payload just…

Continue reading on Medium »

Hacking on Medium
Top 3 Termux SMS Bombing Tools That You Must Know

https://cdn-images-1.medium.com/max/1280/1*n0NDkEbZRz31ge0oD7k2lA.png
Hey guys 🙋‍♂️, One of the most powerful and Awesome things that you can do is SMS Bombing 💣 because it’s all in your control and you…

Continue reading on Medium »

Hacking on Medium
CISA releases tool to review Microsoft 365 post-compromise activity

https://cdn-images-1.medium.com/max/1600/0*rXk5KmoMN7v6figA.jpg
The Cybersecurity and Infrastructure Security Agency (CISA) has released a companion Splunk-based dashboard that helps review…

Continue reading on Cyber Security News & Updates »