WHOIS Calling the 80s to Get Their Finger Back

Explore the concept of Living Off the Land (LOL) in cybersecurity through this 23-minute conference talk from BSidesSF 2019. Dive into the creation of a remote access trojan (RAT) that leverages TCP services like Whois and Finger for network connections to command and control servers. Learn about writing bash one-liner reverse shells using these services, and gain insights from a defender's perspective on detecting such threats. Discover mitigation strategies and participate in a Q&A session to deepen your understanding of this innovative approach to cyber attacks and defense.

Introduction
Demo
Finger
Windows Version
Macros
How to mitigate
Questions