Working state

terraform/aws.tf

@@ -184,10 +184,28 @@ resource "aws_instance" "ramonda" {
     }
   }
 
-  # Run the PowerShell scripts on the Remote Win 10 box to install tools and also join the Win 10 box to the domain
+  # Run the PowerShell scripts on the Remote Win 10 box to install tools
   provisioner "remote-exec" {
     inline = [
-      "powershell -ExecutionPolicy Bypass -File C:/Windows/Temp/rt-toolz.ps1", "powershell -ExecutionPolicy Bypass -File C:/Windows/Temp/join-domain.ps1"
+      "powershell -ExecutionPolicy Bypass -File C:/Windows/Temp/rt-toolz.ps1"
+    ]
+
+    connection {
+      type     = "winrm"
+      user     = "Administrator"
+      password = var.WinRM_PASSWORD
+      host     = aws_instance.ramonda.public_ip
+      port     = 5985
+      insecure = true
+      https    = false
+      timeout  = "7m"
+    }
+  }
+
+# Join the Windows 10 box to the domain bast
+  provisioner "remote-exec" {
+    inline = [
+      "powershell -ExecutionPolicy Bypass -File C:/Windows/Temp/join-domain.ps1"
     ]
 
     connection {
@@ -399,9 +417,9 @@ resource "null_resource" "guacozy-server-setup" {
 
   provisioner "remote-exec" {
     inline = [
-      "sleep 60",
+      "sleep 120",
       "sudo chmod +x /tmp/guacozy.sh",
-      "sudo /tmp/guacozy.sh",
+      "sudo /tmp/guacozy.sh"
     ]
     on_failure = continue
   }

terraform/scripts/guacozy.sh

@@ -1,3 +1,3 @@
 #!/usr/bin/env bash
 cd /tmp/
-sudo docker-compose -f docker-compose up -d
+sudo docker-compose -f docker-compose.yml up -d

terraform/scripts/rt-toolz.ps1

@@ -4,12 +4,12 @@ New-Item -Path 'C:\toolz' -ItemType Directory
 Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))
 
 # Install some stuff
-choco install git googlechrome processhacker python burp-suite-free-edition zap -y
-<# 
-autopsy 7zip adobereader adexplorer apimonitor apktool netfx-4.8 cutter dnspy ghidra golang ida-free javadecompiler-gui#>
+choco install git googlechrome processhacker python burp-suite-free-edition zap autopsy 7zip adobereader adexplorer apimonitor apktool netfx-4.8 cutter dnspy ghidra golang ida-free javadecompiler-gui firefox wget -y
 
 # Pause for 60 seconds
-<# Start-Sleep -Seconds 60
+Start-Sleep -Seconds 60
 Set-Location C:\toolz
-git clone https://github.com/r3motecontrol/Ghostpack-CompiledBinaries.git
-git clone https://github.com/danielmiessler/SecLists.git #>
+wget https://github.com/r3motecontrol/Ghostpack-CompiledBinaries/archive/refs/heads/master.zip
+wget https://github.com/danielmiessler/SecLists/archive/refs/heads/master.zip
+# git clone https://github.com/r3motecontrol/Ghostpack-CompiledBinaries.git
+# git clone https://github.com/danielmiessler/SecLists.git

terraform/vars.tf

@@ -15,7 +15,7 @@ variable "SSH_USER" {
 }
 
 variable "WinRM_USER" {
-  default = "admin"
+  default = "admin@bast.land"
 }
 
 variable "Domain_Admin" {
@@ -166,7 +166,8 @@ data "aws_ami" "windows-client" {
 
   filter {
     name   = "name"
-    values = ["import-ami-06e8283e371f14e87"]
+    values = ["import-ami-07b944fe8b0a37493"]
+    #values = ["import-ami-06104ffaf2a9d8fda"]
   }
 
   most_recent = true