3 ms·
I’ve experimented with this for a while. My clients often have very locked down windows laptops but they oddly allow hand typed powershell scripts to run. If y
by ryanmarsh 9y ago
I’ve experimented with this for a while. My clients often have very locked down windows laptops but they oddly allow hand typed powershell scripts to run.
If you “play” a series of qr codes with checksums and record them from a phone and process the video on the phone you can exfil data without tripping any IDS.
Opening a port often requires privileges or can at least trip an IDS. Silly really.
- tmuir 9y agowouldn't there be some sort of log that the http server utilized the network in some capacity? I have to assume its still opening TCP connections, and using all of the traditional layers below that, all of whose activities are possible to capture.
- ryanmarsh 9y agoNo http server. Modulate the data to an analog set of pictures (actually text based QR codes) then demodulate the pictures from video. No network needed.
- tmuir 9y agoI see, so the relatively low bandwidth of a static QR code is mitigated by a high frame rate. What your saying is that these machines don't log at the operating system level, in the fashion of a tracelog, but count on bad actors to use COTS implementations of those system level calls, and log the high level events? Its a good thing that there isn't much overlap between people who understand penetration strategies and people who can write their own software.
- XorNot 9y agoThis is what I was hoping but not expecting to see here really.