sshimpanzee

Sshimpanzee Sshimpanzee 允许你构建一个静态的 反向 SSH服务器。它不是监听端口等待连接，而是SSH服务器会主动发起反向连接到攻击者的IP，就像常规的反向shell一样。Sshimpanzee 让你能够利用常规SSH连接的所有功能，比如端口转发、动态SOCKS代理或FTP服务器。 更重要的是，如果从受害机器到攻击者服务器的直接连接不可行，它提供了不同的隧道机制，例如DNS隧道、ICMP隧道或HTTP封装。它还支持HTTP和SOCKS5代理。可在lexfo的博客上获取一篇技术论文。 DOCKER构建 - 推荐 sudo docker build . --output...

How the Saitama backdoor uses DNS tunnelling

Thanks to the Malwarebytes Threat Intelligence Team for the information they provided for this article. Understandably, a lot of cybersecurity research and commentary focuses on the act of breaking into computers undetected. But threat actors are often just as concerned with the act of breaking o...