Ansible Cobalt Strike (Docker)

Install evilginx2 in (Docker)

This role is part of the Warhorse Automation Framework. This role can be used with Warhorse or as a standalone role.

Docker Image

ghcr.io/warhorse/docker-evilginx2

Role Variables

A list of all the variables can be found in ./defaults/main.yml.

evilginx2_dir - Cobalt Strike container directory

evilginx2_ports - Cobalt Strike container ports

evilginx2_hostname - Cobalt Strike container hostname

evilginx2_container_name - Cobalt Strike container name

cs_key - Cobalt Strike teamserver license key (REQUIRED)

cs_password - Cobalt Strike teamserver password (REQUIRED)

cs_exp_date - Cobalt Strike becaon expiration date (REQUIRED)

cs_profile_location - Location of your Cobalt Strike profile file

evilginx2_docker_network Cobalt Strike container docker network

Dependencies

ansible-galaxy install geerlingguy.docker geerlingguy.pip

Install

ansible-galaxy install warhorse.cobaltstrike_docker

Example Playbook

- hosts: servers
  roles:
      - { role: warhorse.evilginx2_docker }

Example Vars

cs_hostname: "cobaltstrike"
cs_container_name: "cobaltstrike"
cs_key: '000-000-000-000-000'
cs_password: 'Password'
cs_exp_date: '2020-12-20'
cs_profile_location: 'clean.profile.j2'
cs_docker_network: "cobaltstrike"
cs_dir: '/opt/docker/cobaltstrike'
cs_ports:
  - "50050:50050"
  - "80:80"
  - "443:443"

License

MIT/BSD

Author Information

Ralph May