meta data for this page
  •  

This is an old revision of the document!


Velociraptor

Basic workflow

docker image load -i ./ir-velociraptor.tar
vim config/server.config.yaml
# add server ip
docker compose up
sed -i -E 's|(- https://)[0-9.]+(:[0-9]+/)|\1192.168.1.50\2|' filename.yaml

How it works:

    -E: Enables extended regular expressions (so we can use groups like ()).

    (- https://): Group 1 (\1), matches the prefix.

    [0-9.]+: Matches any combination of numbers and periods (the IP address).

    (:[0-9]+/): Group 2 (\2), matches the port and trailing slash (e.g., :20000/).

    \1192.168.1.50\2: Rebuilds the line using the original prefix, your new IP, and the original port.