Merge pull request #7413 from projectdiscovery/pussycat0x-patch-16

Viper C2 - Detect
patch-1
Dhiyaneshwaran 2023-06-15 14:57:31 +05:30 committed by GitHub
commit 66dc78a099
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 28 additions and 0 deletions

View File

@ -0,0 +1,28 @@
id: viper-c2
info:
name: Viper C2 - Detect
author: pussycat0x
severity: info
description: |
Viper is a graphical intranet penetration tool, which modularizes and weaponizes the tactics and technologies commonly used in the process of Intranet penetration.
reference:
- https://twitter.com/MichalKoczwara/status/1635724410274414596
metadata:
verified: "true"
shodan-query: http.html_hash:1015055567
censys-query: "057f3b5488605b4d224d038e340866e2cdfed4a3"
tags: tech,viper,c2,malware,ir
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- "status_code == 404"
- "(\"057f3b5488605b4d224d038e340866e2cdfed4a3\" == sha1(body))"
condition: and