diff --git a/c2/metasploit-c2.yaml b/c2/metasploit-c2.yaml index dbc723ce8c..fc285945ec 100644 --- a/c2/metasploit-c2.yaml +++ b/c2/metasploit-c2.yaml @@ -9,6 +9,7 @@ info: reference: | https://www.socinvestigation.com/shodan-filters-to-hunt-adversaries-infrastructure-and-c2/ metadata: + verified: "true" shodan-query: ssl:"MetasploitSelfSignedCA" tags: c2,ir,osint,metasploit @@ -20,6 +21,7 @@ ssl: part: issuer_cn words: - "MetasploitSelfSignedCA" + extractors: - type: json json: