Using Hinge as a Command and Control Server
1–10 of 71 posts
Re: Using Hinge as a Command and Control Server
#2Could someone ELI5 what this does?
Re: Using Hinge as a Command and Control Server
#3Could someone ELI5 what this does?
creative platform use
Re: Using Hinge as a Command and Control Server
#4Could someone ELI5 what this does?
Command and Control Server (C2) refers to the infrastructure required to command and control malware of various forms.
The author basically found a creative use of Hinge’s infrastructure and proved it could be used to control malware.
Re: Using Hinge as a Command and Control Server
#5Could someone ELI5 what this does?
> Congratulations! You're now using Hinge to distribute unassuming abstract expressionist pixel art.
Re: Using Hinge as a Command and Control Server
#6I'm not really into malware, so I was just wondering:
- Isn't this really non-viable in practice? The "few headers" that were shown include an Authorization header, that would presumable rotate every ~24 hours and would have to rotate for all the malware clients as well.
- Are centralized Command and Control Severs still a thing in the malware space? I would have assumed that this function mainly migrated onto one of the popular blockchains with clients using one of thousands of available gateways for reading.
Re: Using Hinge as a Command and Control Server
#7I think the Hinge being referred to is a dating app? I have no idea.
Re: Using Hinge as a Command and Control Server
#8I think the Hinge being referred to is a dating app? I have no idea. https://hinge.co/
[deleted]
Re: Using Hinge as a Command and Control Server
#9I'm not really into malware, so I was just wondering: - Isn't this really non-viable in practice? The "few headers" that were shown include an Authorization header, that would presumable rotate every ~24 hours and would have to rotate for all the malware clients as well. - Are centralized Command and Control Severs still a thing in the malware space? I would have assumed that this function mainly migrated onto one of…
probably not so useful in practise, but still fun and interesting.
Yes, centralised C2 is definitely still a thing in the malware space, for commodity malware it works well enough that there's little real incentive to move to anything more complex.
Re: Using Hinge as a Command and Control Server
#10speaking of command and control servers, the best one you can get at the moment is to just to use crypto currencies, plenty of available nodes to auto discover or just rely on explorers to query your own wallet, deposit address can encode quite a bit of information since it's a pretty long address and definitely has enough bytes to encode commands