TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Black Hills InfoSec

How to Build a 404 page not found C2

BHIS · 2016-07-20 · Read original ↗

ATT&CK techniques detected

3 predictions
T1008Fallback Channels
53%
“how to build a 404 page not found c2 how to build a 404 page not found c2 a c2, or command - and - control, is used by attackers to control compromised systems. most of these c2s are in control of large botnets, yet some are simply used by an attacker to have access to a system s…”
T1071.001Web Protocols
50%
“wanted it to be able to control and get a response from a system via the http 404 – file not found. the first part was setting up the web server by adding and configuring the. htaccess file to direct any error pages to a. html file of my choosing ( below i redirect it to evil. ht…”
T1071Application Layer Protocol
49%
“connection. for my demo i am using a windows 10 machine as the “ victim ” and an ubuntu desktop as the web server, the c2 controller, and the c2 receiver. you can see the website is an office 365 login page. though once i go to a page that does not exist, i should get a 404 error…”

Summary

A Guest blog by Matthew Pawelski // A C2, or command-and-control, is used by attackers to control compromised systems. Most of these C2s are in control of large botnets, yet […]

The post How to Build a 404 page not found C2 appeared first on Black Hills Information Security, Inc..