Protocol-Hopping C2: Transport-Agnostic Command & Control That Won't Die
summary
A practical demonstration of a transport-agnostic Command & Control (C2) architecture implemented in Python, showing an agent-controller system whose logic stays the same while switching transport layers. The implementation supports interchangeable transports including ICMP payloads, DNS TXT records, and HTTP headers, and automatically hops between protocols when it detects blocking or interruptions.
AI-written summary · about
chapters (10)
- 0:00C2 systems intro
- 2:27Transport disruption problem
- 5:58Core vs transport adapters
- 8:50Failover mechanisms
- 11:39Live demo: protocol hopping
- 16:16Detection strategies
- 19:45Detection maturity levels
- 21:12Incident response reality
- 23:42Costs of attacker resilience
- 26:30Key takeaways
related talks
19mProtocol-Hopping C2: Transport-Agnostic Command & Control That Won't Die
38mHiding A Secret Distributed Chat System In 802.11 Management Frames
35mTransparent Chaos Testing with Envoy , Cilium and BPF
47mMultipath TCP: Breaking Today's Networks with Tomorrow's Protocols
49mSpooky Action at a Distance: Generating Waves over the Wire for Novel C2
23mHoneypots 2.0: A New ‘Twist’ on Defending Enterprise Networks
33mCAP_NET_RAW And ARP Spoofing in Your Cluster: It's Going Downhill From Here
44mFlying a False Flag: Advanced C2, Trust Conflicts, and Domain Takeover