2023-02-22 05:44:09 +00:00
id : metasploit-c2
info :
2023-02-22 05:46:49 +00:00
name : Detect SSL Certificate Issuer
2023-02-22 05:44:09 +00:00
author : pussycat0x
severity : info
description : |
A Metasploit Framework is a powerful tool that provides a universal interface to work with vulnerability exploit code. It has to exploit code for a wide range of vulnerabilities that impact web servers, OSes, network equipment, and everything in between. Metasploit which serves as both exploitation and C2 frameworks.
reference : |
https://www.socinvestigation.com/shodan-filters-to-hunt-adversaries-infrastructure-and-c2/
metadata :
2023-06-12 12:15:43 +00:00
verified : "true"
2023-10-14 11:27:55 +00:00
max-request : 1
2023-02-22 05:44:09 +00:00
shodan-query : ssl:"MetasploitSelfSignedCA"
2023-06-02 23:19:52 +00:00
tags : c2,ir,osint,metasploit,panel
2023-02-22 05:44:09 +00:00
ssl :
- address : "{{Host}}:{{Port}}"
matchers :
- type : word
part : issuer_cn
words :
- "MetasploitSelfSignedCA"
2023-02-22 13:35:58 +00:00
2023-02-22 05:44:09 +00:00
extractors :
- type : json
json :
- " .issuer_cn"
2023-10-20 11:41:13 +00:00
# digest: 4a0a0047304502205a6b1e6856a0c641ccf99d55484e1a2db9025a46958dd8baa4ed97e63249d9e3022100888875ec30a1b9a55df5faad3002b48a7dd3bab0e24ee6f1589e1491a490bf63:922c64590222798bb761d5b6d8e72950
