search

mdsecactivebreach / o365-attack-toolkit

A toolkit to attack Office365
1.04k stars 213 forks source link

Deployment guide #22

Open cyb3r5t4lk3r opened 4 years ago

cyb3r5t4lk3r commented 4 years ago

I think the new version has bugs. I could not deploy the new version and therefore use the previous version. I fixed bugs in the old version. Could you share with us the procedure for the correct deployment of the new version? Could you have written on which versions the application works?

1) I can not public new version to internet (External server listen on 127.0.0.1, after change to 0.0.0.0, then server start, but Extranet websites doesn't work) 2) Where is static/index.html? External server return 404 3) for installation GO must use https://medium.com/dev-genius/installing-go-on-ubuntu-b443a8f0eb55 and install golang-go, gccgo-go, go-dep, git

0x09AL commented 4 years ago

Hi @cyb3r5t4lk3r, There is a bug when exposing the external server on a different IP rather than 127.0.0.1 which I will fix soon. The recommended architecture is exposing the "external" server only on the localhost and use a reverse proxy configuration that will expose it. This will make it easier for integration and the management of SSL certificates. This new version has changed the way it works so there is no need for the HTML file anymore and is not compatible with the last one. Thanks

cyb3r5t4lk3r commented 4 years ago

Hi @0x09AL Thank you for your answer. If I need to create a custom application (custom view for my application), where I can change and redesign front end web app? For publication, I must create reverse proxy on Linux host and public to the internet by internal reverse proxy as NGINX or you recommend other methods?

I have a tool installed on Ubuntu 18.04 Server without GUI and I must forward loopback to LAN or WAN network (only for testing because Azure Sentinel now detects more operation from O365-Attack-Toolkit and I want to create detection and demonstrate his strong).

0x09AL commented 4 years ago

This toolkit does not have a phishing front-end anymore. It will give you the authentication URL which is the Microsoft one and then redirect to the Office portal after authentication.