Reposted by Rick ConsoleAndrea P @decoder-it.bsky.social · 29/11/2024Relaying DCOM has always intrigued me, so I decided to dive in. Started with a MiTM attack using a fake DNS entry, targeting certificate requests to an ADCS server and relaying to SMB. 183 8
Rick Console @evilwizard.io · 28/11/2024Red Teamers, Ditch redirector headaches and domain categorization issues. Instead, tunnel all your C2 traffic through legitimate cloud services using Jetstream. Mask malicious traffic or get around firewall rules on restricted cloud VMs. Stay posted for updates. #cybersec #redteam #infosec #c2 010 1
Rick Console @evilwizard.io · 27/11/2024Currently working on a web-based Command and Control framework called Jetstream! It focuses on cloud-based C2 channels. In the screenshot you'll see I am communicating to a compromised system using GCP storage buckets as a C2 channel. Follow for updates! #cybersecurity #redteam #infosec #pentesting 000 0
