How Hunt.io Identifies Services on Non-Standard Ports

Hunt introduces Advanced Search, a query language for malware, certificates and open-directory files, shown via Quasar RAT hunts, Cobalt Strike certificate pivots and JA4X-based Sliver discovery.

Hunt explains how it identifies, tracks and 'burns' malicious C2 servers using TLS certificates, HTTP headers, SSH keys, JARM/JA4x hashes and TCP banners, seen in Gh0st and ShadowPad cases.

Hunt announces its C2 Feed, covering how the team identifies and tracks malicious command-and-control servers and packages this intelligence to help defenders block adversary infrastructure.

A Hunt.io guide to detecting Gophish, the open-source phishing framework: why phishing still thrives, how red teams run campaigns with it, and how to spot Gophish servers in the wild.

Hunt launches a platform statistics page, revealing the scale behind its scanning: 1M observations stored per second, 512 cores, 280TB NVMe and 1.5M scheduled port probes per second.

Hunt shows proactive hunting: pivoting on certificate names from Microsoft's Flax Typhoon report yielded four unreported SoftEther servers, plus Cobalt-related files found via keyword search.