Collaborate Disseminate
CloudFrunt is a Python-based tool for identifying misconfigured CloudFront domains, it uses DNS and looks for CNAMEs which may be allowed to be associated with CloudFront distributions. This effectively allows for domain hijacking.
How CloudFrunt Work… Continue reading CloudFrunt – Identify Misconfigured CloudFront Domains
Domain fronting is a technique used to mask command and control (C2) traffic. It is possible for C2 channels to be proxied through CDN’s like Cloudfront to make it appear like normal Internet traffic. It is very difficult to detect and block for defenders as it appears as if clients on a network are connecting […]
The post Domain Fronting – Tradecraft Security Weekly #18 appeared first on Security Weekly.
Continue reading Domain Fronting – Tradecraft Security Weekly #18