1135-CobaltStrike-ToolKit

1135-CobaltStrike-ToolKit Файлы Malleable C2 Профили Malleable C2 для Cobalt Strike, предназначенные для противодействия анализу трафика. Профили Malleable C2 для Cobalt Strike определяют «спецификацию и способ взаимодействия» трафика C2-связи между жертвой victim и командным сервером team server...

gmailc2

gmailc2 root@kitploit: Полностью необнаруживаемый C2-сервер, общающийся через Google SMTP для обхода антивирусной защиты и ограничений сетевого трафика. Примечание: root@kitploit: Этот RAT общается через Gmail SMTP или можно использовать любой другой SMTP, но Gmail SMTP подходит, потому что...

stratum-c2

Cloud Persistence Framework · v3.0.2 A fallback foothold that routes through infrastructure defenders can't block. The problem Your primary C2 goes silent. The domain gets blacklisted. The beacon gets flagged. The EDR kills the process. You're out. You need a second channel — one that was never...

Characterizing AI-Assisted Bot Traffic in Darknet Data: Implications for ICS and IIoT Security

The rise of automated scanning tools and AI assisted reconnaissance agents has significantly altered internet background traffic patterns, threatening the baseline assumptions underlying intrusion detection systems IDS deployed in critical infrastructure networks. This paper characterizes the...

CVE-2023-28807

In Zscaler Internet Access ZIA a mismatch between Connect Host and Client Hello's Server Name Indication SNI enables attackers to evade network security controls by hiding their communications within legitimate traffic...

Design/Logic Flaw

Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...