File tree Expand file tree Collapse file tree 1 file changed +15
-1
lines changed
documentation/modules/exploit/windows/http Expand file tree Collapse file tree 1 file changed +15
-1
lines changed Original file line number Diff line number Diff line change @@ -9,7 +9,21 @@ With this access, it is then possible to run a new payload on all of the NorthSt
9
9
Successfully tested against NorthStar C2 commit ` e7fdce148b6a81516e8aa5e5e037acd082611f73 ` running on
10
10
Ubuntu 22.04. The agent was running on Windows 10 19045.
11
11
12
- 
12
+ ``` mermaid
13
+ flowchart TD
14
+ A(fa:fa-computer Metasploit)
15
+ B(fa:fa-server NorthStar C2)
16
+ C(fa:fa-person Northstar C2 User)
17
+ D(fa:fa-bug Agent)
18
+ A -->|1. Upload XSS| B
19
+ B -...-> C
20
+ C -->|2. Visit XSS Page| B
21
+ C -->|3. Send cookie| A
22
+ A -->|4. Using Cookie, takeover agents| B
23
+ D -->|5. Fetch and run payload, kill agent| A
24
+ D -...-> B
25
+ B -...-> D
26
+ ```
13
27
14
28
### Install NorthStar C2
15
29
You can’t perform that action at this time.
0 commit comments