C2 - Command & Control

Reference

• https://www.youtube.com/watch?v=USYXKK1MDU0

Backdoors

• Detection mechanisms use specific signatures which can be bypassed. [Eg: Headers]

DNSCat2

• https://github.com/iagox86/dnscat2

• Sends all traffic through DNS.

• Setting up an Authorative DNS Server : Refer this.

• Blog: Macrosec

Nishang

• https://github.com/samratashok/nishang/tree/master/Shells

• Use various protocols.

• Includes Gcat: C2 over Gmail Webmail.

VSAgent

Detection Checklist