Any recommendations for #FOSS software for a command & control / manage server?
-
@Natanox any distro, maybe stable and use docker rootless / podman + reverse proxy + wireguard. Dont forget, disable root + his shell (for escalation blocking). Add a strict restrictive firewall policy to ensure maximum security.
Use owasp guide for OCI hardening
-
@TheCyberArcher Thought about using OpenSuse Tumbleweed with Server preset instead of Arch as I'm also comfortable with that and it comes with firewalld, AppArmor, SecureBoot, SELinux and all that jazz right from the installer and is extremely stable in my experience.
Reverse proxy?
I thought about using sth. like OpenVPN to have machines connect to the C&C server (or rather the network it's inside), then have the reverse SSH connection established through it. -
kroy 🏳️🌈🏳️⚧️ 🌈replied to Natasha Nox 🇺🇦🇵🇸 last edited by
@Natanox treat everything like cattle not pets.
Whatever automation that means. Terraform, ansible, docker, kubernetes, etc.
-
Natasha Nox 🇺🇦🇵🇸replied to kroy 🏳️🌈🏳️⚧️ 🌈 last edited by
@kroyio I heard about that sentence but it doesn't make sense to me. Does it mean I should configure it as well as the backup routines in some repeatable fashion…?
-
@Natanox The reverse proxy is if you use web apps, to expose and redirect 443 to specific ports on the server. Depending on your case of administration (if you need GUI), this can be useful.
My server is also under arch, but docker allows me to minimize the impact of an upgrade problem on the host OS side.
Otherwise I agree, ssh through the VPN client to server is better, whether it's with openVPN or Wireguard
-
@TheCyberArcher Oh okay, I thought you meant SOCKS5 or something.
Yeah, I use reverse proxies as well with docker and nginx proxy manager. In this case it probably won't be necessary though.
