Mythic support / c2servers and redirs on same server / bugfixes

[hegusung]

Hello, here is a pull request with multiple features:

• Currently c2servers.tgz and redirs.tgz can't be installed on the same server. the filebeat config can't be deployed together. This PR solves this. redirectors config have been moved to inputs.d
• Mythic support:
  • New agent
  • New task send to agent
  • Task response
  • Data enrichment (for task sent to agent and task response)
  • This is compatible with the logging container: https://github.com/MythicC2Profiles/basic_logger
• The daemon.py script had a dependency issue, i updated the requirements.txt
• The daemon.py script was marked as non-executable, preventing the enrichment execution

[MarcOverIP]

Hey @hegusung thanks for the work!

I never thought of the setup of running the redir and c2 server on the exact same host as it hsa some OPSEC challenges. However, your change is a good one for the people who want this.

Regarding the Mythic logs, I have too little understanding of Mythic's logging setup to know if this is the best/correct way. I would love to have @its-a-feature input on this. Cody, is the above setup with Mythic's basic_logger the preferred way?

[hegusung]

Sorry I spend a lot of time to solve this, I will ask @its-a-feature on slack for his input

[its-a-feature]

Hey @hegusung thanks for the work!

I never thought of the setup of running the redir and c2 server on the exact same host as it hsa some OPSEC challenges. However, your change is a good one for the people who want this.

Regarding the Mythic logs, I have too little understanding of Mythic's logging setup to know if this is the best/correct way. I would love to have @its-a-feature input on this. Cody, is the above setup with Mythic's basic_logger the preferred way?

Hey! Sorry I never saw this! Basic logger is going to be the easiest starting point for sure and is a good way to get things configured. If additional features are needed or configuration parameters exposed, I can always update things to enable that too.

[MarcOverIP]

I appreciate this PR took some time. Just curious if there is a reason to pinpoint these older versions of beautifulsoup and soupsieve

[MarcOverIP]

Any specific reason why to switch to subdir inputs.d instead of the original setup of all in 1 file?

[MarcOverIP]

Thanks. Reviewed, overall looks good. Just looking forward to your answers on 2 comments on specific files.