Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New module: sctp-exfil #24

Open
2 tasks
chrisforce1 opened this issue Jun 15, 2020 · 0 comments
Open
2 tasks

New module: sctp-exfil #24

chrisforce1 opened this issue Jun 15, 2020 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@chrisforce1
Copy link
Contributor

chrisforce1 commented Jun 15, 2020

SCTP can be used to bypass monitoring and filtering, along the lines of http://0x27.me/ssh/sctp/privacy/security/evasion/2015/07/27/SSH-Over-SCTP/. It's a different protocol than TCP or UDP, and I'd like to do some marketing around this at some point to raise awareness.

In this case, we'd do the following:

  • Set up the FTP service from New module: ftp-exfil #23 over SCTP
  • Configure the client to use SCTP, establish a session, and send data to the service

We'd want the module to report on success or failure, so that users can see whether SCTP is being blocked within their environment (similar to what we do with Tor, DNS tunneling, etc.)

@chrisforce1 chrisforce1 added the enhancement New feature or request label Jun 15, 2020
@kmroz kmroz self-assigned this Sep 24, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants