Relaying DCOM has always intrigued me, so I decided to dive in. Started with a MiTM attack using a fake DNS entry, targeting certificate requests to an ADCS server and relaying to SMB.

Red Teamers,

Ditch redirector headaches and domain categorization issues. Instead, tunnel all your C2 traffic through legitimate cloud services using Jetstream.

Mask malicious traffic or get around firewall rules on restricted cloud VMs. Stay posted for updates.

#cybersec #redteam #infosec #c2

Currently working on a web-based Command and Control framework called Jetstream! It focuses on cloud-based C2 channels. In the screenshot you'll see I am communicating to a compromised system using GCP storage buckets as a C2 channel. Follow for updates!

#cybersecurity #redteam #infosec #pentesting