Design and Implementation of Webshell Encrypted Communication Management Tool Based on Golang and Qt5
Haibo Luo, J. Q. Yan · 2023
In network attack and defense drills, the WebShell encrypted communication management tool can improve the attack efficiency and quality of red teams on the one hand; On the other hand, it also enriches the defense experience of the blue team. WebShell is very popular in offensive and defensive warfare due to its advantages of no compilation, short and simple size, good concealment, high permissions, and the ability to write it to the target server through various vulnerabilities. By combining the prototyping model method and waterfall model method, we have developed a WebShell management tool C2022, which is a tool that can more fully utilize WebShell. Using WebShell management tools can more conveniently complete complex command execution, code execution, file operations, database operations, and more. The WebShell scripts supported by C2022 include mainstream PHP, JSP, and ASP. C2022 is mainly divided into WebShell generation module, WebShell management module, WebSshell execution module, WebS hell traffic fuzzy processing module, information detection module, and static page fuzzy processing module. C2022 has advantages that mainstream WebShell management tools currently do not have, and we hope to help red team attackers improve attack efficiency and avoid backtracking.