HTTP/S Beaconing Implant
Configuration options are found in configuration.json
- callback - The URL(s) to call back to. Throwback picks one at random every time it calls in.
- error_timeout - The time in seconds to sleep if it can not connect to the callback url (picked at random).
Run the script configure.py to generate the auto_config.h file before compiling.
**This is all taken care of by configure.py and configuration.json above. You don't need to do this.
- Run the python script to encode strings. python tbManger.py encode http://mydomain.com/index.php
http://mydomain.com/index.php -> {57,37,37,33,107,126,126,60,40,53,62,60,48,56,63,127,50,62,60,126,56,63,53,52,41,127,33,57,33}
Note: Don't forget to add ,-1 to end of the integer array for an LP. So the above would become.
{57,37,37,33,107,126,126,60,40,53,62,60,48,56,63,127,50,62,60,126,56,63,53,52,41,127,33,57,33,-1}
-
Update DNSARRAY to reflect the number of LPs listed in DNSCODE array.
-
Compile!
-
Setup ThrowbackLP.