6 matches found
geacon
Geacon Usando Go para implementar Beacon de CobaltStrike Este proyecto es solo para aprendizaje de análisis de protocolos e ingeniería inversa. Si se han violado los derechos de alguien, por favor contácteme para eliminar el proyecto, y por último, NO LO USE ILEGALMENTE Cómo jugar 1. Configura el...
pig_CS4.4
注：仅供安全研究与学习之用，若将工具做其他用途，由使用者承担全部法律及连带责任，作者及发布者不承担任何法律及连带责任。 Cobalt Strike 4.4 猪猪版 该版本为预发布内测版本,公开版本即将在五月底发布 1. 去暗桩 2. 更改认证头 COOKIE改为Authentication 3. 更改get请求 与POST请求地址 4. 使用geacon二次开发版 替换beacon,可实现免杀实测火绒 360. 大概五月底发布 5. 更改为json相应包和请求包 6. CVE-2022-39197补丁 7. 修改ja3和ja3s特征...
Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers
Chinese users looking for legitimate software such as Notepad++ and VNote on search engines like Baidu are being targeted with malicious ads and bogus links to distribute trojanized versions of the software and ultimately deploy Geacon, a Golang-based implementation of Cobalt Strike. "The malicio...
Hackers Using Golang Variant of Cobalt Strike to Target Apple macOS Systems
A Golang implementation of Cobalt Strike called Geacon is likely to garner the attention of threat actors looking to target Apple macOS systems. That's according to findings from SentinelOne, which observed an increase in the number of Geacon payloads appearing on VirusTotal in recent months...
Hackers Using Golang Variant of Cobalt Strike to Target Apple macOS Systems
A Golang implementation of Cobalt Strike called Geacon is likely to garner the attention of threat actors looking to target Apple macOS systems. That's according to findings from SentinelOne, which observed an increase in the number of Geacon payloads appearing on VirusTotal in recent months...
Blackrota Golang Backdoor Packs Heavy Obfuscation Punch
Researchers have discovered a new backdoor written in the Go programming language Golang, which turned their heads due to its heavy level of obfuscation. The backdoor, called Blackrota, was first discovered in a honeypot owned by researchers, attempting to exploit an unauthorized-access...