To find c2 server malicious IP and domains
Rameshkhanna123 opened this issue · 1 comments
Rameshkhanna123 commented
Hi Team, I would like to understand how the C2 Back Connect Check works. Could you please provide me with the sample POC and arguments? I tried but its not working for me
Neo23x0 commented
Team?
It checks the network connections of running processes.
Better use THOR Lite.
https://www.nextron-systems.com/thor-lite/