Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

关于冰蝎流量绕过全流量分析安全设备的建议 #138

Open
cnzzr opened this issue Mar 17, 2021 · 0 comments
Open

关于冰蝎流量绕过全流量分析安全设备的建议 #138

cnzzr opened this issue Mar 17, 2021 · 0 comments

Comments

@cnzzr
Copy link

cnzzr commented Mar 17, 2021

利用反编译的代码改造冰蝎sell和客户端，实现了绕过“奇安信网神安全分析与管理系统”，实现方法如下
1、增加随机信息将心跳包的大小变的不一样
2、将冰蝎shell返回的流量改造成pdf文件下载，将真实的数据附加在pdf文件之后，再在客户端进行截取。

@rebeyond 感谢提供实用工具！
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cnzzr