threatexpress/malleable-c2

Help

Closed this issue · 1 comments

hello could you tell me why when I add a certain number of ips this happens?

[] dropping 192.168.1.22/jquery-3.3.1.min.js from Beacon profile for size
[
] dropping 192.168.1.21/jquery-3.3.1.min.js from Beacon profile for size
[] dropping 192.168.1.20/jquery-3.3.1.min.js from Beacon profile for size
[
] dropping 192.168.1.19/jquery-3.3.1.min.js from Beacon profile for size
[] dropping 192.168.1.18/jquery-3.3.1.min.js from Beacon profile for size
[
] dropping 192.168.1.17/jquery-3.3.1.min.js from Beacon profile for size
[] dropping 192.168.1.22/jquery-3.3.1.min.js from Beacon profile for size
[
] dropping 192.168.1.21/jquery-3.3.1.min.js from Beacon profile for size
[] dropping 192.168.1.20/jquery-3.3.1.min.js from Beacon profile for size
[
] dropping 192.168.1.19/jquery-3.3.1.min.js from Beacon profile for size
[] dropping 192.168.1.18/jquery-3.3.1.min.js from Beacon profile for size
[
] dropping 192.168.1.17/jquery-3.3.1.min.js from Beacon profile for size
[+] Listener: test started!

Sorry for the delay in response! I'm guessing that error was likely due to the maximum size that Beacon allows for patching in the C2profile within Beacon. If you absolutely need that many callback IPs, you could try reducing the HTTP get/post content to reduce the overall size of the profile.