Meterpreter with Categorized Domains & Trusted Certs - Tradecraft Security Weekly #4

It is common for organizations to proxy web traffic so they can place restrictions on what websites can be visited by employees. To make the management of allowing or denying access to a large number of sites easier many web proxies utilize categorization engines to group sites into various subjects. Uncategorized sites are generally blocked. In this episode I show how it's easy to locate recently expired domains that have been categorized already, and can be utilized to get past web proxy filters. Additionally, I show how easy it is to set up a trusted certificate on the payload handler to encrypt the session using a custom cert.
Links:
DomainHunter - github.com/min...
Brian Fehrman Blog Post - www.blackhillsi...

[@beau_bullock]

Thanks for the comments guys! I really appreciate the feedback.

[@frankkesel7252]

continue the good work theses rocks

[@gamesaddict2]

I do wish these were live; I know for quality they cant be. Damn good though! keep it up!