Module introduction

In this module, you’ll set up and refine three core on-premises components of the C2 environment: the management server (Mgmt-server), operator clients, and teamservers. You’ll complete the management server build as the central administrative workstation, create scalable operator clients that support day-to-day red-team operations, and deploy your first Cobalt Strike and Mythic teamservers.

You’ll learn how to harden and operationalize the management server by locking down access, enabling controlled file transfer, and establishing a clean file structure for distributing software, configuration templates, and certificates to other systems in later modules.

Next, you’ll build an operator client template and use it to provision one or more operator clients, integrate them into Guacamole for remote access, and enable file transfer so operators can work efficiently and move files between their Layer 1 device (e.g., a laptop) and the Layer 2 operator client.

Finally, you’ll provision multiple teamservers by installing and configuring Cobalt Strike and Mythic, integrate them with Guacamole, and set up connectivity between the operator clients and the teamservers.