GC2 (Google Command and Control) is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrates data using Google Drive. Why This program...
GC2 (Google Command and Control) is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrates data using Google Drive. Why This program...
Use the HTTP protocol version to send a file bit by bit (“HTTP/1.0” is a 0 and “HTTP/1.1” is a 1). It uses GET requests so the Blue Team would only see the requests...
CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender’s ConfigSecurityPolicy.exe to perform arbitrary GET requests....
Browsertunnel is a resource for exfiltrating info from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a element supposed to decrease the perceived latency of sites by executing DNS lookups...
Cybercriminal groups are constantly evolving to find new means to pilfer monetary info, and the hottest trick in their arsenal is to leverage the messaging application Telegram to their benefit. In what is a...
