Skip to content

patch 编译tcp beacon 问题1 #91

@NorthShad0w

Description

@NorthShad0w

patch 编译tcp beacon 问题1

tcp_default profile 的 implant.yaml:

targets:
- address: 192.168.150.131:5001
tcp: {} # ✓ TCP transport

pulse:
protocol: tcp # ✓ TCP protocol
http: # ← 这个字段导致误检测!
method: POST
path: /pulse
...

检测逻辑问题:DetectTransport 函数只检查字符串 http: 是否存在:

hasHTTP := strings.Contains(content, "http:")

即使 targets 使用 TCP,pulse.http 字段的存在导致检测为 HTTP transport。

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions