2023-02-22 05:44:09 +00:00
id : metasploit-c2
info :
2023-12-07 21:57:41 +00:00
name : Metasploit C2 - Detect
2023-02-22 05:44:09 +00:00
author : pussycat0x
severity : info
description : |
A Metasploit Framework is a powerful tool that provides a universal interface to work with vulnerability exploit code. It has to exploit code for a wide range of vulnerabilities that impact web servers, OSes, network equipment, and everything in between. Metasploit which serves as both exploitation and C2 frameworks.
reference : |
https://www.socinvestigation.com/shodan-filters-to-hunt-adversaries-infrastructure-and-c2/
metadata :
2023-06-12 12:15:43 +00:00
verified : "true"
2023-10-14 11:27:55 +00:00
max-request : 1
2023-02-22 05:44:09 +00:00
shodan-query : ssl:"MetasploitSelfSignedCA"
2024-01-14 09:21:50 +00:00
tags : c2,ssl,tls,ir,osint,malware,metasploit
2023-02-22 05:44:09 +00:00
ssl :
- address : "{{Host}}:{{Port}}"
matchers :
- type : word
part : issuer_cn
words :
- "MetasploitSelfSignedCA"
2023-02-22 13:35:58 +00:00
2023-02-22 05:44:09 +00:00
extractors :
- type : json
json :
- " .issuer_cn"
2024-01-26 08:31:11 +00:00
# digest: 4a0a0047304502202383b575b428a4d458235a58dc0a75e9f8de5b1ed887cbec15d33035864ac12c02210087e452f8eb1570f261c4b03b1a1f123734a3b207cf984cb630e01a65d34c779b:922c64590222798bb761d5b6d8e72950
