diff options
| author | hrbrmstr <bob@rud.is> | 2026-06-08 07:05:50 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-06-08 07:05:50 -0400 |
| commit | d7a9bac5ba6b053f46ecd5685b60c2ffd89ea528 (patch) | |
| tree | 72e674b58f34b04a92b41b0b268efafff407f68d /kevlar/2026-06-08/iocs/c2-paths.txt | |
| parent | 459bf07097e9da493b92244c2b4d1eb0682dee29 (diff) | |
add: iocs
Diffstat (limited to 'kevlar/2026-06-08/iocs/c2-paths.txt')
| -rw-r--r-- | kevlar/2026-06-08/iocs/c2-paths.txt | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/kevlar/2026-06-08/iocs/c2-paths.txt b/kevlar/2026-06-08/iocs/c2-paths.txt new file mode 100644 index 0000000..0f7b51c --- /dev/null +++ b/kevlar/2026-06-08/iocs/c2-paths.txt @@ -0,0 +1,5 @@ +/login/?login_only=1 -- cPanel login probe, HOSTKEY, port 2086 +/openid_connect/cpanelid -- cPanel OpenID probe, HOSTKEY, port 2086 +/api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows -- C2 beacon, FlokiNET, port 443 +/images/json? -- Docker API enumeration (go-dockerclient), KAOPU-HK, ports 2375/2376/4243 +/debug/pprof -- pprof endpoint exposed on riptide scanner, Pfcloud, port 666 |