Redcloud

Weather report. Cloudy with a chance of shells!

Early release. Follow me on Twitter to stay updated on Redcloud's development.
💁☁️🐚🌱

---

Quick Start - Architecture - Use-cases - Screenshots

---

Introduction

Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface.

Ideal for your penetration tests, shooting ranges, red teaming and bug bounties!

Self-host your attack infrastructure painlessly, deploy your very own live, scalable and resilient offensive infrastructure in a matter of minutes.

Demo

The following demo showcases deployment of Redcloud through ssh, followed by Metasploit. We then look at Traefik and a live volume attached to Metasploit. Finally, we check that Metasploit's DB is functional with the web terminal, delete the container, and terminate Redcloud.

---

Features

• Deploy Redcloud locally or remotely using the built-in SSH functions, and even docker-machine.
• Deploy Metasploit, Empire, GoPhish, vulnerable targets, a fully stacked Kali, and many more with a few clicks.
• Monitor and manage your infrastructure with a beautiful web interface.
• Deploy redirections, socks or Tor proxy for all your tools.
• Painless network management and volume sharing.
• User and password management.
• Web terminal
• Overall very comfy 🐣

---

Quick Start

Setup:

# If deploying using ssh
> cat ~/.ssh/id_rsa.pub | ssh root@your-deploy-target-ip 'cat >> .ssh/authorized_keys'

# If deploying using docker-machine, and using a machine named "default"
> eval (docker-machine env default)

# Check your Python version
# Use python3 if default python version is 2.x
> python --version

Deploy:

> git clone https://github.com/khast3x/redcloud.git
> cd redcloud
> python redcloud.py

Redcloud uses PyYAML to print the list of available templates. It's installed by default on most systems.
If not, simply run:

# Use pip3 if default python version is 2.x
> pip install -r requirements.txt

Redcloud has 3 different deployment methods:

1. Locally
2. Remotely, using ssh. Requires having your public key in your target's authorized_keys file.
3. Remotely, using docker-machine. Run the eval (docker-machine env deploy_target) line to preload your env with your docker-machine, and run redcloud.py. Redcloud should automatically detect your docker-machine, and highlight menu items relevant to a docker-machine deployment.

---

Templates

---

Briefly,

redcloud.py deploys a Portainer stack, preloaded with many tool templates for your offensive engagements, powered by Docker. Once deployed, control Redcloud with the web interface. Uses Traefik as reverse-proxy. Easy remote deploy to your target server using the system ssh or docker-machine.

• 🚀 Ever wanted to spin up a Kali in a cloud with just a few clicks?
• 📦 Have clean silos between your tools, technics and stages?
• 🚑 Monitor the health of your scans and C2?
• 🔥 Skip those sysadmin tasks for setting up a phishing campaign and get pwning faster?
• 😈 Curious how you would build the ideal attack infrastructure?

Use the web UI to monitor, manage, and interact with each container. Use the snappy web terminal just as you would with yours. Create volumes, networks and port forwards using Portainer's simple UI.

Deploy and handle all your favorite tools and technics with the power of data-center-grade internet 🚀

---

In the following section, we'll be going more in-depth inside Redcloud's design concepts. You can get started without having to dive inside though.

---

• 📖 Table of contents
  • Introduction
  • Features
  • Quick Start
  • Details
    • Redcloud Architecture
    • Deployment workflow
    • Networks
    • Volumes
    • Accessing containers from the terminal
    • Accessing files
    • SSL Certificates
    • Stopping Redcloud
    • Portainer App Templates
    • Traefik reverse-proxy
    • Redcloud security considerations
  • Tested deployment candidates
  • Troubleshooting
  • Use-cases
  • Screenshots
  • Contribution guideline
  • Hosting Redcloud
  • Inspirations & Shout-outs

---

Details

Redcloud Architecture

• redcloud.py: Starts/Stops the Web interface and App Templates, using Docker and Portainer.
• portainer: Portainer web interface.
• traefik: Traefik reverse-proxy container to the web interface, api and files containers. Some templates have pre-configured routes for convenience. See the templates.yml.
• templates: python3 http.server container that feeds the App Templates. Lives in an "inside" network.
• cert_gen: The omgwtfssl container that generates the SSL certificates using common best practices.
• https://your-server-ip/portainer: Redcloud Web interface once deployed.
• https://your-server-ip/files: Redcloud redcloud_files volume. You can also access the redcloud_log container content, protected by the same .htpasswd as Traefik. Default credentials: admin:Redcloud
• https://your-server-ip/api: Traefik reverse-proxy health monitoring page. Shows live stats about routes, backends, return codes. Will also show reverse-callback implant data if configured through Traefik.

Deployment workflow

Redcloud deployment workflow is as follows:

1. Clone/Download Redcloud repository.
2. Launch redcloud.py.
3. Choose deployment candidate from the menu (local, ssh, docker-machine).
4. redcloud.py automatically:
   • checks for docker & docker-compose on target machine.
   • installs docker & docker-compose if absent.
   • deploys the web stack on target using docker-compose.
5. Once deployment is complete, redcloud.py will output the URL. Head over to https://your-deploy-machine-ip/portainer.
6. Set username/password from the web interface.
7. Select the endpoint (the only one on the list).
8. Access the templates using the "App Templates" menu item on the left 🚀