c2 • blog.network-sec

A Comprehensive Guide for Modern Pentesters

img of Reviving C2 Powershell Empire + Starkiller using Python

Mar 7, 2024 3 min read

C2

Reviving C2 Powershell Empire + Starkiller using Python

C2 Powershell Empire is a classic - but can you still use it with EDR (Defender) in place?

img of Contemporary Persistence using C2 Sliver, installing AnyDesk w/o Shell

Mar 3, 2024 7 min read

C2

Contemporary Persistence using C2 Sliver, installing AnyDesk w/o Shell

Let's try and do things like they're done in real attacks. While the media recently was all over ConnectWise ScreenConnect, we instead focus on AnyDesk - which is used by many Cybercriminals these days - in an Assumed Breach scenario.

img of C2 Sliver Persistence using Path Interception with scrnsave.exe

Feb 26, 2024 3 min read

RedTeam

C2 Sliver Persistence using Path Interception with scrnsave.exe

Discover a simple persistence technique to leverage environment path interception vulnerabilities, using SCRNSAVE.exe to trigger a Sliver mTLS payload. This detailed guide covers the process from identifying the vector to executing the Sliver payload, aimed at offensive security professionals seeking to enhance their toolkit.