The Slingshot CS Matrix Edition was made in collaboration with SANS, Ryan O'Grady, and C2 Matrix contributors. The goal is to lower the learning curve of installing each C2 framework and getting you straight to testing which C2s work against your organization. Slingshot C2 Matrix Edition is ideal for red team, blue team, and purple team functions.

Slingshot C2 Matrix Edition brings the following C2s pre-installed:

• ​Covenant​

• ​Empire3 with Starkiller​

• ​Faction​

• ​Koadic​

• ​Merlin​

• ​Metasploit​

• ​SilentTrinity​

• ​Sliver​

Slingshot - C2 Matrix Edition also includes a number of other tools that red teamers and penetration testers will find useful such as VECTR for tracking red and purple team exercises.

Getting Started

SANS Slingshot C2 Matrix Edition 2020.5 can be downloaded from here: https://www.sans.org/slingshot-vmware-linux/download​

Ensure you have vmware Workstation, Player, or Fusion so that it can be imported. Double clicking it and clicking import should do the trick:

The default network device is configured as NAT for your own safety and to start of with a basic lab.

Login with the user: slingshot and password: slingshot

Double click MATE Terminal to change your password with the passwd command:

FAQ

What is the username and password of Slingshot?

Username: slingshot
Password: slingshot

Why is the image so big? The various Command and Control frameworks bring a number of dependencies. As we wanted this to be a standalone image, we have pre-downloaded and installed them for you.

What is the SHA256 sum:

2020.4: e8f3aa841a5244c0419cab7006486be6bdd7c001282833e1fbd1e9698f80069e

2020.5: 9b01151590f85fe0a1aeeeefba7a83af817d16c9b9443a54409ea03c242f9b8d

How do I start VECTR:

VECTR is a tool for managing and tracking red and purple team exercises. Start it like this:

cd /opt/vectr/
./vectr-bootstrap.sh

Then open Firefox and visit VECTR homepage: https://vectr.internal:8081​

Username: admin
Password: 11_ThisIsTheFirstPassword_11

Update VECTR:

cd /opt/vectr/
Edit docker-compose.yml
Change line that states "image: securityriskadvisors/vectr_tomcat:5.5.7" to "image: securityriskadvisors/vectr_tomcat:5.7.0"
Save
./vectr-bootstrap.sh

Something is bound to port 80, 443, or something else, how do I stop it?

2020.5:
sudo service apache2 stop
​
2020.4:
cd /opt/apfell
sudo ./stop_apfell.sh
sudo service postgresql stop
sudo service apache2 stop