Skip to content

patch 编译tcp beacon 问题1 #91

Description

@NorthShad0w

patch 编译tcp beacon 问题1

tcp_default profile 的 implant.yaml:

targets:
- address: 192.168.150.131:5001
tcp: {} # ✓ TCP transport

pulse:
protocol: tcp # ✓ TCP protocol
http: # ← 这个字段导致误检测!
method: POST
path: /pulse
...

检测逻辑问题:DetectTransport 函数只检查字符串 http: 是否存在:

hasHTTP := strings.Contains(content, "http:")

即使 targets 使用 TCP,pulse.http 字段的存在导致检测为 HTTP transport。

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions