This is a quick demo of part of the 365 lab work. In here you will see a windows command prompt sent to both another Windows system and to a Linux system.
Oh yes this kind of traffic can be patched or blocked by your software firewall. the problem in this example is to show students how it was done and to see the traffic patterns in wireshark. They can then start to build up their defence strategies to block this kind of traffic in the network. the key problem is hackers always find a new way to do the seam thing, think of cryptcat on TCP port 80, almost invisible if SSL traffic is permitted.
Hello @meathook3000
Oh yes this kind of traffic can be patched or blocked by your software firewall. the problem in this example is to show students how it was done and to see the traffic patterns in wireshark. They can then start to build up their defence strategies to block this kind of traffic in the network. the key problem is hackers always find a new way to do the seam thing, think of cryptcat on TCP port 80, almost invisible if SSL traffic is permitted.
rickerty2 1 year ago