SeeProxy

Golang reverse proxy with CobaltStrike malleable profile validation.
The premise of this tool is to not open your teamserver to the world but to a single instance of SeeProxy instead.
This way every request reaching your teamserver is a legitimate C2 traffic.

Example deployment

Below you can find a very basic example deployment for a red team engagement. Only valid traffic from an instance of SeeProxy is permitted to reach the C2.

Usage:

$ make
$ SeeProxy --teamserver <IP>:<PORT> --profile <path_to_malleable_profile> --port <local_port>

Demo video

A short video of sending a lot of invalid HTTP requests and a few valid ones.