enkomio / AlanFramework

A C2 post-exploitation framework

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[QUESTION] Connexion AWS server

piedacoulisse2 opened this issue · comments

Hello,

I have a question about the C2. Why is there a connexion to the web server AWS 34.252.108.5 in the app ?

Best regards;

Piedacoulisse

Hi,

the connection to that IP is necessary to obtain the public Alan server IP address. This information is handy during the creation of an agent (you have to specify a public IP address in order for the agent to connect to the server). More information on this aspect are provided in the guide (https://github.com/enkomio/AlanFramework/blob/main/doc/Alan%20Documentation%20-%20v7.0.514.10.pdf) on page 7.

Ok thank for the response.

You can also use to obtain the public ip with http://api.ipify.org insteed of AWS server.

yep. I might considering, for the next release, to use more than one URL to obtain the public IP, or give the possibility to disable the IP resolution at all.