Hands-On Red Team Tactics

Chapter 10: C2 – Master of Puppets

1. We can use different platforms such as Gmail, Twitter, and different protocol suits like HTTP 2.0, DNS, and so for communication.
2. It's recommended that you create a new account because sometimes Dropbox can disable your account as we're using their features in a simulated attack.
3. Well you can but you need your system to be connected to the internet at all times because you never know when the agent will be connecting to you. It's recommended that you setup the C2 server on a cloud service like AWS for efficient usage.
4. Yes there are tools which can be used for automated configuration and setup. Refer to https://rastamouse.me/2017/08/automated-red-team-infrastructure-deployment-with-terraform---part-1/.