3 ms·
How many read-write services can you use to redirect traffic to your C2 infrastructure while almost guaranteeing organizations will allow outbound connections t
by sylens 4y ago
How many read-write services can you use to redirect traffic to your C2 infrastructure while almost guaranteeing organizations will allow outbound connections to it and not look too closely at it?
- easrng 4y agoGoogle Docs/Forms/Sheets/etc, anything with an image proxy, probably Microsoft's Office Online stuff tho I personally haven't used it, webpush connections, the possibilities are endless.
- jiggawatts 4y agoDNS…
- sylens 4y agoGoogle and now Microsoft are also blocking domain fronting. The other 'possibilities' are not necessarily guaranteed to be allowed for egress traffic out of an organization. That's why the cloud providers blocking it is a big deal - most orgs WILL allow outbound traffic on more than a few ports to these platforms
- mindslight 4y agoUnless corporate firewalls have advanced to the point where they're DNS aware (eg the client queries www.microsoft.com and only then is allowed to contact those IPs), can one not just direct domain-fronting-style traffic to any VPS?