常见攻击工具特征及检测分析
目录
1 隧道通信 ............................................................................................................................................... 4
1.1 DNS 隧道 ................................................................................................................................................... 4
1.1.1 CobaltStrike DNS Beacon ................................................................................................................ 4
1.2 ICMP 隧道 .................................................................................................................................................. 5
1.2.1 pTunnel .................................................................................................................................................. 5
1.2.2 icmpsh .................................................................................................................................................... 6
2 代理通信 ............................................................................................................................................... 7
2.1. NPS .............................................................................................................................................................. 7
2.1.1 NPS 简介 ............................................................................................................................................... 7
2.1.2 NPS 通信特征 ...................................................................................................................................... 7
2.1.3 NPS 使用备忘 ...................................................................................................................................... 9
2.2 FRP ............................................................................................................................................................. 12
2.2.1 FRP 简介 .............................................................................................................................................. 12
2.2.2 FRP 通信特征 ..................................................................................................................................... 12
2.2.3 FRP 使用备忘 ..................................................................................................................................... 14
2.2.3.1 FRP 配置文件说明 ................................................................................................................................... 14
2.2.3.2 FRP 典型配置举例 ................................................................................................................................... 16
2.3 VENOM ........................................................................................................................................................ 19
2.3.1 venom 简介 ........................................................................................................................................ 19
2.3.2 venom 通信特征 ............................................................................................................................... 19
2.3.3 venom 使用备忘 ............................................................................................................................... 21
2.4 FASTTUNNEL ............................................................................................................................................... 22
2.4.1 FastTunnel 简介 ................................................................................................................................ 22
2.4.2 FastTunnel 通信特征 ....................................................................................................................... 22
2.5 TERMITE ...................................................................................................................................................... 23
2.5.1 Termite 简介....................................................................................................................................... 23
2.5.2 Termite 通信特征 ............................................................................................................................. 23
2.5.3 Termite 使用备忘 ............................................................................................................................. 24
2.6 STOWAWAY ................................................................................................................................................ 25
2.6.1 Stowaway 简介 .................................................................................................................................. 25
2.6.2 Stowaway 通信特征 ......................................................................................................................... 25
2.6.3 Stowaway 使用备忘 ......................................................................................................................... 26
2.7 LANPROXY .................................................................................................................................................. 29
2.7.1 Lanproxy 简介.................................................................................................................................... 29
2.7.2 Lanproxy 通信特征 .......................................................................................................................... 29
2.7.3 Lanproxy 使用备忘 .......................................................................................................................... 30
2.8 长亭百川主机管理助手 ....................................................................................................................... 30
2.8.1 简介 .................................................................................................................................................. 30
2.8.2 通信和终端行为特征 .................................................................................................................. 31
2.8.3 使用备忘 ......................................................................................................................................... 31
2.9 QUASAR ...................................................................................................................................................... 33
2.9.1 Quasar 简介........................................................................................................................................ 33
2.9.2 Quasar 通信特征 .............................................................................................................................. 33
2.9.3 Quasar 使用备忘 .............................................................................................................................. 34
3 扫描渗透工具 ..................................................................................................................................... 34
3.1 RSAS .......................................................................................................................................................... 34
3.2 GOBY ........................................................................................................................................................... 35
3.3 XRAY ........................................................................................................................................................... 35
3.4 EZ................................................................................................................................................................. 35
3.5 FSCAN .......................................................................................................................................................... 35
3.6 NMAP .......................................................................................................................................................... 35
3.7 METASPLOIT ............................................................................................................................................... 36
结语 .............................................................................................................................................................. 37资料下载
© 版权声明
文章版权归作者所有，转载请标明出处。
THE END
暂无评论内容