Documentation
¶
Overview ¶
Package transform contains built-in implementations of the 'c2.Transform' interface, which can be used to manupilate data that is passed between Sessions and C2 Servers.
Index ¶
Constants ¶
const Base64 = B64(0)
Base64 is a transform that auto converts the data to and from Base64 encoding. This instance does not include any shifting.
Variables ¶
var DNS = DNSTransform{}
DNS is the standard DNS Transform alias. This alias uses the default DNS addresses contained in 'DefaultDomains()' to spoof C2 communications as valid DNS packets.
Custom options may be used by creating a new DNS alias or updating the current alias (string array) with new domains.
Functions ¶
func DefaultDomains ¶
func DefaultDomains() []string
DefaultDomains returns an array of DNS names to be used if the DNS Transform is empty.
Types ¶
type B64 ¶ added in v0.1.0
type B64 byte
B64 is the underlying type for the Base64 Transform. This Transform encodes data into a Base64 string before the final write to the output.
func B64Shift ¶ added in v0.1.0
B64Shift returns a Base64 Transform that also shifts the bytes by the specified amount before writes and after reads. This is useful for evading detection by avoiding commonly flagged Base64 values.
type DNSTransform ¶ added in v0.2.2
type DNSTransform []string
DNSTransform is a Transform alias that attempts to mask C2 traffic in the form of DNS request packets.
Source Files