StatusISOLATED LAB
Phase03_INITIAL_ACCESS
EgressBLOCKED?
Resume Session
RED TEAM OPS // PHASE 04

Command & Control

Shape traffic so the beacon looks like normal HTTPS. Add persistence at the right integrity level.

Objectives

  1. 01Rotate jitter and sleep to match a boring profile.
  2. 02Install user-level persistence (Run key) — lab-only.
  3. 03Verify the blue-team pipeline picks something up.

ATT&CK techniques

T1071.001T1573T1547.001

Operator Checklist

operator@linux01 ~ /ops/c2
[*] Reconfigured session 1: interval=60s jitter=30%
[+] Callback @ 14:41:02 -- 342 bytes
$

Command Reference

← PHASE 03 Initial AccessPHASE 05 Privilege Escalation →