Hack Journalists
Wil Allsopp · 2017
This chapter first gives examples of cold reading methods as used by stage performers adapted for use in social engineering scenarios. It then introduces some advanced concepts in C2 agent management that will be vital to understand in an environment where one need to manage a number of agents without utilizing too much of the target's bandwidth. The easiest way to achieve the goal of C2 server guided agent management is to allow the C2 server to assign roles to the C2 agents. The chapter talks about Java applets and touched on Adobe Flash as attack vectors. However, as Oracle has expressed a desire to replace applets in their current form and as the browser makers have lost all patience with Adobe over their complete lack of secure coding practices, neither of these technologies are going to be around forever. Their successors are in active deployment and are suitable for use in APT modeling attacks.