Tag: snort detection

1 Attack Reports | 0 Vulnerabilities

Attack reports

Writing a BugSleep C2 server and detecting its traffic with Snort

This analysis focuses on the BugSleep implant, also known as MuddyRot, a remote access tool that provides reverse shell and file I/O capabilities. The article details the process of reverse engineering BugSleep's protocol, creating a functional C2 server, and developing Snort rules for traffic dete…
rat
bugsleep
2024-10-30
reverse engineering
muddyrot
python server
c2 protocol
snort detection
Published: October 30, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports