31.Golang Beacons and VS Code Tunnels: Tracking a Cobalt Strike Server Leveraging Trusted Infrastructureblog | 2025-01-07 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #golang
32.Targeting Innovation: Sliver C2 and Ligolo-ng Used in Operation Aimed at Y Combinatorblog | 2024-11-12 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #c2 | #sliver
33.Announcing Hunt SQLblog | 2024-10-03 00:00 | hunt.io | Original ↗ | .md | #product-update | #threat-hunting | #phishing
34.Good Game, Gone Bad: Xeno RAT Spread Via .gg Domains and GitHubblog | 2024-06-25 00:00 | hunt.io | Original ↗ | .md | #github | #c2 | #rat
35.Gh0st and Pantegana: Two RATs that Refuse to Fade Awayblog | 2024-06-12 00:00 | hunt.io | Original ↗ | .md | #c2 | #rat | #tls-certificates
36.Legacy Threat: PlugX Builder/Controller Discovered in Open Directoryblog | 2024-06-05 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #open-directories
37.Into the Viper’s Nest: Observations from Hunt’s Scanningblog | 2024-05-08 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #red-team-tools
38.Spotting SparkRAT: Detection Tactics & Sandbox Findingsblog | 2024-04-23 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #detection
39.In Plain Sight: Uncovering SuperShell & Cobalt Strike from an Open Directoryblog | 2024-04-16 00:00 | hunt.io | Original ↗ | .md | #linux | #c2 | #cobalt-strike
40.A Hunt How-To: Detecting RedGuard C2 Redirectorblog | 2024-04-02 00:00 | hunt.io | Original ↗ | .md | #blue-team | #c2 | #detection
41.Tracking ShadowPad Infrastructure Via Non-Standard Certificatesblog | 2024-02-09 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #tls-certificates
42.How We Identify Malicious Infrastructure At Hunt.ioblog | 2024-01-24 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #methodology
43.Introducing the Hunt.io C2 Feedblog | 2024-01-15 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #threat-hunting | #c2
44.Transparency of Attacker Toolingblog | 2023-08-17 00:00 | hunt.io | Original ↗ | .md | #incident-response | #threat-hunting | #c2
45.Let's go Huntingblog | 2023-08-01 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #launch
46.What the Vuln: EDR Bypass with LoLBinsblog | 2023-03-23 00:00 | bishopfox.com | Original ↗ | .md | #red-team | #c2 | #edr-bypass
47.BC Security's Empire/Starkiller & Kali Linuxblog | 2021-01-12 00:00 | kali.org | Original ↗ | .md | #c2 | #kali-linux | #empire
48.A How-To Guide for Using Sliverblog | 2019-08-05 00:00 | bishopfox.com | Original ↗ | .md | #red-team | #c2 | #penetration-testing
49.Modern Red Team Infrastructureblog | 2019-06-13 00:00 | netspi.com | Original ↗ | .md | #red-team | #c2 | #infrastructure
50.🧙 Merlin v0.6.0 Beta Releasedblog | 2018-08-07 07:00 | specterops.io | Original ↗ | .md | #c2 | #release | #specterops
51.🧙 Merlin Adds Support for the QUIC protocolblog | 2018-07-31 07:00 | specterops.io | Original ↗ | .md | #c2 | #quic | #specterops
52.Databases and Clouds: SQL Server as a C2blog | 2018-05-25 00:00 | netspi.com | Original ↗ | .md | #cloud | #red-team | #c2
53.HTTPS Payload and C2 Redirectorsblog | 2018-04-11 07:00 | specterops.io | Original ↗ | .md | #red-team | #c2 | #redirector
54.🧙 Merlin v0.1.4 Released — Menus &Modulesblog | 2018-03-16 01:45 | specterops.io | Original ↗ | .md | #c2 | #release | #specterops
55.🧙 Merlin Adds DLL Agent & PowerShell Invoke-Merlin Scriptblog | 2018-03-14 07:00 | specterops.io | Original ↗ | .md | #red-team | #c2 | #specterops
56.🧙 Merlin Adds Module Support 🔌blog | 2018-03-14 01:00 | specterops.io | Original ↗ | .md | #red-team | #c2 | #specterops
57.Expanding the Empire with SQLblog | 2017-05-09 00:00 | netspi.com | Original ↗ | .md | #c2 | #empire | #post-exploitation
58.Throwback Thursday – A Guide to Configuring Throwbackblog | 2016-01-27 00:00 | netspi.com | Original ↗ | .md | #red-team | #c2 | #backdoor