DIY C2 - Malleable Agent Config

IppSec · Beginner ·🤖 AI Agents & Automation ·4y ago
00:00 - Intro 01:08 - Showing malleable c2 configs 06:55 - Creating a Hello World in C++ then creating a 2000 byte variable 10:25 - Adding JSON Support to our program 14:10 - Creating a Struct and function to initialize the config 17:55 - Having our main function parse the config 19:25 - Not sure what happened to my config.h, retyping it 21:30 - JSON Parsing done 22:30 - Creating a Python Program to replace the embedded config 27:30 - XOR'ing our config in python so we avoid strings 29:10 - XOR'ing in our agent to read the "encrypted" config 34:34 - Opening it up in Ghidra and doing some extre…
Watch on YouTube ↗ (saves to browser)

Chapters (13)

Intro
1:08 Showing malleable c2 configs
6:55 Creating a Hello World in C++ then creating a 2000 byte variable
10:25 Adding JSON Support to our program
14:10 Creating a Struct and function to initialize the config
17:55 Having our main function parse the config
19:25 Not sure what happened to my config.h, retyping it
21:30 JSON Parsing done
22:30 Creating a Python Program to replace the embedded config
27:30 XOR'ing our config in python so we avoid strings
29:10 XOR'ing in our agent to read the "encrypted" config
34:34 Opening it up in Ghidra and doing some extremely light reversing
40:30 Showing what happens if we strip the binary

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →
1 HHC2016 - Dungeon
HHC2016 - Dungeon
IppSec
2 HHC2016 - Terminal Speedrun
HHC2016 - Terminal Speedrun
IppSec
3 HHC2016 - Ads
HHC2016 - Ads
IppSec
4 HHC2016 - Debug
HHC2016 - Debug
IppSec
5 HHC2016 - Exception
HHC2016 - Exception
IppSec
6 HHC2016 - Analytics
HHC2016 - Analytics
IppSec
7 HHC2016 - Getting Coins
HHC2016 - Getting Coins
IppSec
8 HackTheBox - Popcorn
HackTheBox - Popcorn
IppSec
9 HackTheBox - October
HackTheBox - October
IppSec
10 HackTheBox - Arctic
HackTheBox - Arctic
IppSec
11 HackTheBox  - Tenten
HackTheBox - Tenten
IppSec
12 HackTheBox - CronOS
HackTheBox - CronOS
IppSec
13 HackTheBox - Brainfuck
HackTheBox - Brainfuck
IppSec
14 HackTheBox - Beep
HackTheBox - Beep
IppSec
15 HackTheBox - Bastard
HackTheBox - Bastard
IppSec
16 HackTheBox - Bank
HackTheBox - Bank
IppSec
17 HackTheBox - Joker
HackTheBox - Joker
IppSec
18 HackTheBox - Haircut
HackTheBox - Haircut
IppSec
19 HackTheBox - Lazy
HackTheBox - Lazy
IppSec
20 Camp CTF 2015 - Bitterman
Camp CTF 2015 - Bitterman
IppSec
21 HackTheBox - Devel
HackTheBox - Devel
IppSec
22 Reversing Malicious Office Document (Macro) Emotet(?)
Reversing Malicious Office Document (Macro) Emotet(?)
IppSec
23 HackTheBox - Granny and Grandpa
HackTheBox - Granny and Grandpa
IppSec
24 HackTheBox - Pivoting Update: Granny and Grandpa
HackTheBox - Pivoting Update: Granny and Grandpa
IppSec
25 HackTheBox - Optimum
HackTheBox - Optimum
IppSec
26 HackTheBox - Charon
HackTheBox - Charon
IppSec
27 HackTheBox - Sneaky
HackTheBox - Sneaky
IppSec
28 HackTheBox - Holiday
HackTheBox - Holiday
IppSec
29 HackTheBox - Apocalyst
HackTheBox - Apocalyst
IppSec
30 HackTheBox - Europa
HackTheBox - Europa
IppSec
31 Introduction to tmux
Introduction to tmux
IppSec
32 HackTheBox - Blocky
HackTheBox - Blocky
IppSec
33 HackTheBox - Nineveh
HackTheBox - Nineveh
IppSec
34 HackTheBox - Jail
HackTheBox - Jail
IppSec
35 HackTheBox - Blue
HackTheBox - Blue
IppSec
36 HackTheBox - Calamity
HackTheBox - Calamity
IppSec
37 HackTheBox - SolidState
HackTheBox - SolidState
IppSec
38 HackTheBox - Shrek
HackTheBox - Shrek
IppSec
39 HackTheBox - Mirai
HackTheBox - Mirai
IppSec
40 HackTheBox - Shocker
HackTheBox - Shocker
IppSec
41 HackTheBox - Mantis
HackTheBox - Mantis
IppSec
42 HackTheBox - Node
HackTheBox - Node
IppSec
43 HackTheBox - Kotarak
HackTheBox - Kotarak
IppSec
44 HackTheBox - Enterprise
HackTheBox - Enterprise
IppSec
45 HackTheBox - Sense
HackTheBox - Sense
IppSec
46 HackTheBox - Minion
HackTheBox - Minion
IppSec
47 VulnHub - Sokar
VulnHub - Sokar
IppSec
48 VulnHub - Pinkys Palace v2
VulnHub - Pinkys Palace v2
IppSec
49 HackTheBox - Inception
HackTheBox - Inception
IppSec
50 Vulnhub - Trollcave 1.2
Vulnhub - Trollcave 1.2
IppSec
51 HackTheBox - Ariekei
HackTheBox - Ariekei
IppSec
52 HackTheBox - Bashed
HackTheBox - Bashed
IppSec
53 HackTheBox - Flux Capacitor
HackTheBox - Flux Capacitor
IppSec
54 HackTheBox - Jeeves
HackTheBox - Jeeves
IppSec
55 HackTheBox - Tally
HackTheBox - Tally
IppSec
56 HackTheBox - CrimeStoppers
HackTheBox - CrimeStoppers
IppSec
57 HackTheBox - Fulcrum
HackTheBox - Fulcrum
IppSec
58 HackTheBox - Chatterbox
HackTheBox - Chatterbox
IppSec
59 HackTheBox - Falafel
HackTheBox - Falafel
IppSec
60 HackTheBox - Nibbles
HackTheBox - Nibbles
IppSec
Claude Code Source Code Just Leaked… 8 Things You Must Do
Next Up
Claude Code Source Code Just Leaked… 8 Things You Must Do
Nate Herk