fix(c2): redteam-friendly verify_tls default (sprint 10) #12

Merged
knacky merged 6 commits from sprint/10-c2-tls-default into main 2026-06-21 19:44:33 +00:00
Showing only changes of commit 774ae05748 - Show all commits

View File

@@ -24,7 +24,7 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
const [url, setUrl] = useState(''); const [url, setUrl] = useState('');
const [token, setToken] = useState(''); const [token, setToken] = useState('');
const [verifyTls, setVerifyTls] = useState(true); const [verifyTls, setVerifyTls] = useState(false);
const [replaceToken, setReplaceToken] = useState(false); const [replaceToken, setReplaceToken] = useState(false);
const [showDeleteConfirm, setShowDeleteConfirm] = useState(false); const [showDeleteConfirm, setShowDeleteConfirm] = useState(false);
const [testResult, setTestResult] = useState<{ ok: boolean; message: string } | null>(null); const [testResult, setTestResult] = useState<{ ok: boolean; message: string } | null>(null);
@@ -71,7 +71,7 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
push('C2 configuration removed', 'success'); push('C2 configuration removed', 'success');
setUrl(''); setUrl('');
setToken(''); setToken('');
setVerifyTls(true); setVerifyTls(false);
setReplaceToken(false); setReplaceToken(false);
} catch (err) { } catch (err) {
push(extractApiError(err, 'Could not remove C2 configuration'), 'error'); push(extractApiError(err, 'Could not remove C2 configuration'), 'error');
@@ -166,6 +166,7 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
)} )}
</FormField> </FormField>
<div className="flex flex-col gap-xs">
<div className="flex items-center gap-sm"> <div className="flex items-center gap-sm">
<input <input
id="c2-verify-tls" id="c2-verify-tls"
@@ -180,6 +181,10 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
Verify TLS certificate Verify TLS certificate
</label> </label>
</div> </div>
<p className="text-[12px] text-graphite">
Leave unchecked for lab Mythic with self-signed certificates.
</p>
</div>
<div className="flex items-center gap-md flex-wrap"> <div className="flex items-center gap-md flex-wrap">
<button <button