Re:Merlin: A cross-platform command and control server and a...
by SEJeff on Wednesday January 02, 2019 @10:35AM
(#18806789)
My take is that HTTP/2 is more significant than you might expect, primarily because it is a full duplex protocol (unlike the typical request / response of HTTP/1). This makes it like a more efficient websocket, so the C2 bits can move faster than a polling based approach. That said, this makes it easier to detect.
[ Parent
| on HN ]
There are no comments on this comment yet.