June 23, 2022, 9:30 p.m. | noreply@blogger.com (Unknown)

KitPloit - PenTest Tools! www.kitploit.com


Simple C2 over Trello's API (Proof-of-Concept)

By: Fabrizio Siciliano (@0rbz_)

Update 12/30/2019

Removed hardcoded API key and Token, use input() instead.


Requirements

Python 3.x

Setup

  1. Create a Trello account: https://trello.com/signup
  2. Once logged in, get your API key: https://trello.com/app-key
  3. Generate a Token (same page as app-key, follow the "Token" link)
  4. Save both API key and Token, they're used in both the agent and operator scripts.
  5. Browse to your board https://trello.com/b/[random]/[membername].json to get the list ID which is required in …

api c2 pentesting redteam simple trello windows

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Network AWS Cloud &Firewall Engineer

@ Arthur Grand Technologies Inc | Plano, TX, United States

Lead Consultant, Data Centre & BCP

@ Singtel | Singapore, Singapore

Protocol Security Engineer

@ Osmosis Labs | Remote

Technical Engineer - Payments Security Specialist

@ H&M Group | Bengaluru, India

Intern, Security Architecture

@ Sony | Work from Home-CA