Bypassing botnet filtering

If you have read the previous sections in order, then at this point you should be able to grab a command over Twitter without the need to log into Twitter and submit a text into a Google form, also without logging into the Google account. Lastly, you should be able to upload files to SourceForge. So, you might be asking: what can a hacker do with these services?

Well, they can send a command such as ipconfig as a tweet and then they can make multiple infected targets to parse the tweet and execute the commands. After executing the commands, we get the execution results, which can be submitted to a Google form. Alternatively, if the command syntax or format was containing the grab keyword, then the target will upload ...

Get Python for Offensive PenTest now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.