Finding Metasploit & Cobalt Strike URLs
Metasploit and Cobalt Strike generate shellcode for http(s) shells. The URLs found in this shellcode have a path that consist of 4 random alphanumeric characters. But they are not completely random: their 8-bit checksum is a member of a small set of constants.
https://isc.sans.edu/diary/Finding+Metasploit+Cobalt+Strike+URLs/27204
#Cobalt_Strike , #Metasploit ,
Metasploit and Cobalt Strike generate shellcode for http(s) shells. The URLs found in this shellcode have a path that consist of 4 random alphanumeric characters. But they are not completely random: their 8-bit checksum is a member of a small set of constants.
https://isc.sans.edu/diary/Finding+Metasploit+Cobalt+Strike+URLs/27204
#Cobalt_Strike , #Metasploit ,