News for hackers. Stuff that matters.

A comment on Chisel: A fast TCP/UDP tunnel over HTTP. Parent comment

Re:Chisel: A fast TCP/UDP tunnel over HTTP by Thorrez on Saturday April 06, 2024 @05:44PM (#39955868)
What benefit would a self-updating mechanism provide?
[ Parent | on HN ]
Re:Chisel: A fast TCP/UDP tunnel over HTTP by globular-toast on Saturday April 06, 2024 @06:24PM (#39956207)
Assuming they mean a cat and mouse game like ytdl where the software is updated once it starts getting detected by the enemy.
[ Parent | on HN ]
Re:Chisel: A fast TCP/UDP tunnel over HTTP by mr_mitm on Sunday April 07, 2024 @02:28AM (#39958623)
How will it self update after it's been deleted by the AV? Also, there are many AVs with different detection strategies. It's not always static analysis that can easily be defeated by slightly changing some lines of code.
[ Parent | on HN ]
Re:Chisel: A fast TCP/UDP tunnel over HTTP by globular-toast on Sunday April 07, 2024 @06:05PM (#39964376)
I was thinking more about it being filtered by firewalls.
[ Parent | on HN ]
Re:Chisel: A fast TCP/UDP tunnel over HTTP by Thorrez on Sunday April 07, 2024 @05:42PM (#39964217)
I don't think Chisel has a goal of evading AV detection.
[ Parent | on HN ]