Aplicación para controlar equipos través de un canal encubierto

Héctor de Armas, better known as 3v4Si0N, presented the HTTP-revshell tool that allows the use of a covert channel (covert channel) to gain control of the victim machine through web requests and, in this way, bypass solutions such as an IDS, IPS, and AV.

Covert channel is the manipulation of a communication protocol (in this case HTTP and HTTPS) to send information in a way that is outside the protocol specification.

HTTP-revshell has been developed to be used in RedTeam or pentesting exercises, to test the detection capabilities of the security solutions that a company may have implemented.

Despite this, it is a very powerful tool that if used with bad intentions could cause serious damage.

More news