HTTP/S Beaconing Implant
Clone or download
Latest commit 1f5bd64 Aug 25, 2017
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Python Added Python script Aug 8, 2014
Throwback Fix registry check for runkey Aug 30, 2016
ThrowbackDLL Initial Aug 8, 2014
bin Added Python script Aug 8, 2014
.gitattributes 🎊 Added .gitattributes & .gitignore files Aug 8, 2014
.gitignore 🎊 Added .gitattributes & .gitignore files Aug 8, 2014
LICENSE Create LICENSE Sep 28, 2014
README.md Create README.md Aug 8, 2014
Throwback.sln Initial Aug 8, 2014
Throwback.suo Initial Aug 8, 2014

README.md

Throwback

HTTP/S Beaconing Implant

  1. Run the python script to encode strings. python tbManger.py encode http://mydomain.com/index.php

http://mydomain.com/index.php -> {57,37,37,33,107,126,126,60,40,53,62,60,48,56,63,127,50,62,60,126,56,63,53,52,41,127,33,57,33}

Note: Don't forget to add ,-1 to end of the integer array for an LP. So the above would become.

{57,37,37,33,107,126,126,60,40,53,62,60,48,56,63,127,50,62,60,126,56,63,53,52,41,127,33,57,33,-1}

  1. Update DNSARRAY to reflect the number of LPs listed in DNSCODE array.

  2. Compile!

  3. Setup ThrowbackLP.