Botconf 2025·41 min
Security researchers examine technical aspects of Tricky obfuscation techniques for C2 communication ? Just detect them all !.
c2obfuscationcommunication
c2
39 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 39 talks · loading…
Briefings·36 min
Adam Crosser
Red team operators frequently struggle with establishing interactive command and control (C2) over traditional C2 channels.
open-sourcewebprotocols+3
Briefings·22 min
Hariharan Shanmugam
Apple's on device AI frameworks CoreML, Vision, AVFoundation enable powerful automation and advanced media processing.
aiencryptionmachine-learning+3
CODE BLUE·40 min
Presenters detail vulnerability discovery and exploitation in [CB22]Tracking the Entire Iceberg - Long-term APT Malware C2 Protocol Emulation and Scanning.
malware-analysisc2apt+2
Creator Stage·48 min
Asher Davila
Examines the challenges of analyzing Go-based IoT malware and demonstrates reversing techniques using the Pumabot surveillance botnet as a case study.
malwaregolangiot+2
Data Duplication Village·32 min
Mauro Eldritch · Nelson Colon
Demonstrates how adversaries abuse distributed data replication systems, IPFS, NFTs, and Cloudflare R2 for resilient C2 infrastructure and payload delivery.
c2ipfsphishing+2
Hackers of CypherCon·32 min
John Conwell | CypherCon 6.0
John Conwell | CypherCon 6.0 analyzes Secret Handshake A Mutual TLS Based C2 Communication Channel.
c2tlscommunication
Main Stage·42 min
Gal Weizman
Demonstrates how WebRTC channels and enterprise web conferencing platforms can be repurposed as stealthy command-and-control and data exfiltration pipelines.
c2webexfiltration+2
Main Stage·33 min
Ben Folland
Demonstrates methodologies for intercepting and decrypting command-and-control traffic between active malware implants and adversary servers.
c2threat-intelligencemalware-analysis+2
Main Stage·42 min
Jason Lang
Introduces advanced offensive networking techniques and covert communication channels to bypass modern enterprise perimeter monitoring and EDR telemetry.
red-teamingevasionc2+2
Main Stage·43 min
Quentin Roland · Wilfried Bécard
Demonstrates how red teams can weaponize Active Directory Group Policy Objects (GPOs) into a stealthy, native command-and-control infrastructure.
active-directoryc2gpo+2
RF Village·39 min
Eric Escobar
Eric Escobar details building an out-of-band command-and-control infrastructure using $25 Meshtastic LoRa radios to manage remote Linux dropboxes.
meshtasticc2lora+2
Creator Stage·22 min
Mauro Eldritch · Cybelle Oliveira
Introduces mFT, an open-source tool demonstrating how to use blockchain-backed non-fungible tokens as immutable command-and-control infrastructure.
c2blockchainmalware+2
Creator Stage·23 min
Julia Dewitz-Würzelberger
Demonstrates full-chain adversary emulation against a hydroelectric power plant firing range and details the resulting incident response analysis.
ics-otadversary-emulationcritical-infrastructure+2
Creator Stage·23 min
Shishir Gupta
Shares tactical insights and attack vectors from a decade of offensive red team simulations inside large-scale industrial control environments.
ics-otred-teamingcritical-infrastructure+2
Main Stage·39 min
Vangelis Stykas
Vulnerabilities and offensive disruption techniques targeting the web management panels of active ransomware operations.
ransomwarec2web-panels+2
Main Stage·31 min
S1nn3r
Reverse engineering of Smishing Triad kits and administrative panels leading to the recovery of over 390,000 compromised credit cards.
smishingthreat-intelligencephishing+2
x33fcon·40 min
3. Sebastian Feldmann, Dominik Phillips: Fingerprinting Modern C2 Implants Through Runtime Telemetry
Security researchers examine technical aspects of 3. Sebastian Feldmann, Dominik Phillips: Fingerprinting Modern C2 Implants Through Runtime Telemetry.
c2telemetryimplants+1
Black Hat USA·39 min
Marcos Oviedo · Zach Wasserman
Presenters detail vulnerability discovery and exploitation in Windows Agentless C2: (Ab)using the MDM Client Stack.
windowsc2mdm
Main Stage·45 min
RJ McDown
RJ McDown presents Obligato, a covert implant communication framework that abuses legacy Windows session architectures to decouple C2 traffic from malware processes.
c2malwarewindows-internals+2
Main Stage·35 min
Vangelis Stykas
Vangelis Stykas demonstrates how typical web application flaws in abandoned malware C2 infrastructure allow researchers to compromise admin panels and identify threat actors.
c2malwareweb-application-security+2
War Stories·21 min
Lorenzo Cococcia
Lorenzo Cococcia explores offensive physical geolocation, using network latency trilateration across distributed sensors to locate adversary C2 servers.
geolocationlatency-trilaterationthreat-intelligence+2
BSides Knoxville·40 min
Adam Compton
Coverage of Adam Compton: A Hillbilly's First C2 from the conference program.
c2adamcompton+1
BSides Prishtina·8 min
Timothy Makram Ghatas
Gemhide Sliver: Making C2 Look Like Anything You Need.
c2gemhidesliver+2