Skip to content

patch 编译tcp beacon 问题1 #91

@NorthShad0w

Description

@NorthShad0w

patch 编译tcp beacon 问题1

tcp_default profile 的 implant.yaml:

targets:
- address: 192.168.150.131:5001
tcp: {} # ✓ TCP transport

pulse:
protocol: tcp # ✓ TCP protocol
http: # ← 这个字段导致误检测!
method: POST
path: /pulse
...

检测逻辑问题:DetectTransport 函数只检查字符串 http: 是否存在:

hasHTTP := strings.Contains(content, "http:")

即使 targets 使用 TCP,pulse.http 字段的存在导致检测为 HTTP transport。

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions