Meshtastic Command & Control
Eric Escobar details building an out-of-band command-and-control infrastructure using $25 Meshtastic LoRa radios to manage remote Linux dropboxes.
Summary
Out-of-Band Remote Host Management
Maintaining reliable command-and-control (C2) to remote physical dropboxes or isolated hardware in denied network environments presents major connectivity challenges.
Meshtastic LoRa as an Out-of-Band C2 Channel
Eric Escobar demonstrates how low-cost ($25) LoRa hardware and the open Meshtastic mesh network can serve as a decentralized, long-range command transport.
Executing Remote Shell Commands Over LoRa
Encoding encrypted terminal commands and diagnostic scripts into LoRa text messages enables operators to manage Linux endpoints without cellular modems or local Wi-Fi.
Operational Advantages and Constraints
While constrained by low LoRa bandwidth, Meshtastic C2 provides a resilient, off-grid communication channel for troubleshooting, exfiltration, and stealthy endpoint management.
Related talks
Main Stage·42 min
Jason Lang
Introduces advanced offensive networking techniques and covert communication channels to bypass modern enterprise perimeter monitoring and EDR telemetry.
Main Stage·42 min
Gal Weizman
Demonstrates how WebRTC channels and enterprise web conferencing platforms can be repurposed as stealthy command-and-control and data exfiltration pipelines.
Main Stage·43 min
Quentin Roland · Wilfried Bécard
Demonstrates how red teams can weaponize Active Directory Group Policy Objects (GPOs) into a stealthy, native command-and-control infrastructure.