Hands-On Red Team Tactics

Using OneDrive as the C2

The settings for OneDrive are different to those of Dropbox, but the concept is the same. Let's create a OneDrive listener in Empire using the uselistener onedrive command from the listeners menu:

The options that are available to set are displayed in the following screenshot:

The options that we need to start the listener are: AuthCode and ClientID.

To get the ClientID, we need to register to Microsoft's developer account and log in. We can see the application dashboard by visiting https://apps.dev.micrsoft.com/#/appList ...