RSSAmplifier

OJ's Perspective · Feb 22, 2016

TLV Traffic Obfuscation

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

As many of you are already aware, Metasploit and Meterpreter talk to each other using a variety of transports. While the transports may vary from session to session, one thing that doesn’t vary is the “protocol” that travels over those transports. This information fits a well-known structure, and is referred to as TLV Packets (Type, Length, Value). Once a session has been…

Read on /posts/tlv-traffic-obfuscation/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.