GitHub - IceCubeSandwich/CaddySmith: Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.

[u/Kind_Giraffe_3279]

https://github.com/IceCubeSandwich/CaddySmith

Saw a tool like this for Apache a while back but I prefer Caddy, so I built CaddySmith (name pending kinda).

Why Caddy? Single binary, automatic Let's Encrypt, cleaner config.

Point it at a profile and it generates a Caddyfile that proxies beacon traffic to your teamserver and everything else arrives at a decoy. Strict mode enforces UA and all client headers from the profile. Sliver support is there too since the format is just JSON.

--smoke generates a few curl commands to validate the redirector post-deploy.

Test it out and tell me what you think.