Hands-On Red Team Tactics

Terminology

Before getting into the details of all the options used in this tool, let's first take a look at the terminologies of the tool:

• Zombies:

The compromised system that connects back to the Koadic Command and Control Server. Just like a session is opened in Metasploit, a zombie will connect back to Koadic.

• Stagers:

The Command and Control web server from where the payload and implants are fetched by the zombie. Stagers are also used to maintain the connection between the zombies and Koadic. Note that Koadic does not rely on TCP connections for continues communication. Instead, the connection is maintained by requesting multiple HTTP connections.

• Implants:

An implant is a JavaScript or a VBScript code, which is executed by zombies ...