nopbrick / SeeProxy

Golang reverse proxy with CobaltStrike malleable profile validation.

SeeProxy

Golang reverse proxy with CobaltStrike malleable profile validation.
The premise of this tool is to not open your teamserver to the world but to a single instance of SeeProxy instead.
This way every request reaching your teamserver is a legitimate C2 traffic.

Example deployment

Below you can find a very basic example deployment for a red team engagement. Only valid traffic from an instance of SeeProxy is permitted to reach the C2.

Usage:

$ make
$ SeeProxy --teamserver <IP>:<PORT> --profile <path_to_malleable_profile> --port <local_port>

Demo video

A short video of sending a lot of invalid HTTP requests and a few valid ones.