News for hackers. Stuff that matters.

A comment on Merlin: A cross-platform command and control server and agent written in Go. Parent comment

Re:Merlin: A cross-platform command and control server and a... by Ne0nd0g on Tuesday January 01, 2019 @01:29PM (#18801478)
Tools like JA3 https://github.com/salesforce/ja3 can fingerprint TLS traffic to provide one way to perform some type of evaluation. Defender can detect on a lot of other things like an applications behavior.
[ Parent | on HN ]
Re:Merlin: A cross-platform command and control server and a... by xfs on Tuesday January 01, 2019 @03:02PM (#18801953)
That can be trivially defeated by operating on top of Chrome's net stack though.
[ Parent | on HN ]