2 个仓库
Processes for exchanging encryption keys and system information during the initial handshake between a post-exploitation agent and its command server.
Distinct from Handshake Validations: Distinct from Handshake Validations: covers the cryptographic key exchange and system info exchange, not just header validation.
Explore 2 awesome GitHub repositories matching security & cryptography · Agent-Server Key Exchanges. Refine with filters or upvote what's useful.
Empire is a post-exploitation command-and-control (C2) framework designed for red team operations. It deploys and manages agents written in PowerShell, Python, C#, Go, and C across Windows, Linux, and macOS, using encrypted communication channels over HTTP, HTTPS, and SMB. The framework executes over 400 built-in modules for reconnaissance, privilege escalation, credential theft, and lateral movement, and provides a modular engine for authoring custom attack modules. What sets Empire apart is its multi-language agent deployment system, which allows operators to choose implants that suit each
Provides a two-stage key exchange to establish encrypted communication between agents and the command server.
Covenant 是一个基于 .NET 的命令与控制(C2)框架,专为红队行动和对抗模拟而设计。它作为一个协作平台,用于协调安全评估、管理远程植入物,并通过中央服务器在受损系统上执行任务。 该项目的特色在于其动态载荷生成器,可即时编译和混淆可执行二进制文件及脚本以绕过检测。它通过一个协作环境进一步脱颖而出,该环境允许多个经过身份验证的操作员共享同步状态、跟踪操作指标,并在单个界面内管理联合行动。 该框架提供了广泛的流量混淆功能,包括使用自定义网络配置文件、数据转换流水线以及基于网桥的协议转换来掩盖通信。它还涵盖了后渗透需求,如远程文件检索、集中式凭据收集,以及使用插件扩展模型开发自定义远程任务模块。 该系统使用 SSL 证书固定和加密密钥交换来保护服务器与代理之间的通信,以确保前向安全性。
Implements encrypted key exchanges during the initial handshake to ensure forward secrecy between agents and the server.