9. Collaboration and OffensiveNotion
This page covers the collaborative features of OffensiveNotion. Topics include using Notion for distributed, collaborative red team operations and using the mobile Notion application to issue commands to your agent.
OffensiveNotion has a teamserver!
No, really! And the best part is the OffensiveNotion devs didn't need to lift a finger to implement it.
The Notion application is a collaborative notetaking platform by design. The free tier of Notion allows you to invite a handful of friends to view and edit your Notion pages.
Because all agent commands are issued through your specified Notion listener page, this means that you can invite your friends and red team colleagues and give them access to your Notion page! A single Listener page can handle multiple agents and multiple red teamers can be invited to view and edit your Listener.
Congratulations, you now have a teamserver!
- Choose the page that you want to invite your red team compatriots to. This can be your Listener page itself, or perhaps one level up from that where you may be keeping other notes for the op. In this example, the main page for OPERATION: SNEAKYSLOTH has the LISTENER page as a child.
- In the upper-right corner, click "Share."
- Click "Invite"
- Add the email or username of your collaborator. You can also modify the access rights when you grant them access
- Once their name shows up in the search list, click on it and then click "Invite"
- Once they accept, they can access that page and all subpages! This means they can access the Listener page and all of the agents that check in. Get to collaboratin'!
Tag your other operators during the engagement and tell them about interesting information...
Comment, caption, highlight, and summarize findings!
The app will also alert you when there are changes to the page. So it will let you know when agents check in or your co-operator performs an action.
It's about as straightforward as it sounds!
Notion is available on most mobile platforms. One you get the app and sign in, you have access to all of your notebooks. This includes your LISTENER page.
Pwn on the run, with OffensiveNotion!