Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Silk Wasm: Obfuscating HTML Smuggling with Web Assembly

netspi.com | blog | #red-team | #wasm | #evasion | #initial-access | #malware-delivery | #html-smuggling

Summary

NetSPI demonstrates obfuscating HTML smuggling with Web Assembly, embedding payloads in Wasm so files reassemble victim-side and evade network detections that flag suspicious outbound file downloads.
Published
Collected

original ↗

Related coverage

blog · netspi.com
An Approach to Bypassing Mail Filters
Will Pearce shows that nulling the first bytes of a docm file lets spam filters deliver it despite block rules; Word's repair restores the file and the embedded macro still executes.
blog · netspi.com
Adding Web Content Filter Exceptions for Phishing Success
Describes how attackers can submit phishing domains to web content filter categorization services so corporate filters whitelist the sites, improving success rates in phishing engagements.
blog · netspi.com
The Evolution of Offensive PowerShell Invocation
Traces the evolution of offensive PowerShell invocation from powershell.exe command lines to in-memory .NET loading with UnmanagedPowerShell, evading process creation monitoring.
blog · netspi.com
BOFScale: A CDN-Fronted Tailnet from a BOF-PE
BOFScale runs a patched Tailscale daemon as a BOF-PE inside the implant, relaying C2 over standard WebSockets so DERP and control-plane traffic blends in behind CDNs like CloudFront and Fastly.
blog · netspi.com
Machine Learning for Red Teams, Part 1
Will Pearce demonstrates machine learning for red teams: a simple process list provides enough data to detect sandbox environments, helping payloads avoid detonation and extend technique lifespan.
blog · netspi.com
.Net Reflection without System.Reflection.Assembly
Alexander Leary updates RunDotNetDll32 to load .NET assemblies via Type.GetType instead of suspicious Assembly.LoadFile calls, executing DLL methods while dodging common detection logic.
back