Domain Borrowing: Catch My C2 Traffic if You Can

For red teams, CDN is a good redirector and protector for their C2 traffic, especially with domain fronting. However, if there are HTTPS decryption devices in the network, domain fronting can be easily detected by comparing SNI and HOST. This talk will present a new method to hide your C2 traffic with CDN to circumvent censorship.....
By:
Tianze Ding & Junyu Zhou
Full Abstract & Presentation Materials:
www.blackhat.c...