Skip to content
Threat Feed
Subscribe

Tag

Certreq

1 brief RSS
medium advisory

Certreq HTTP POST Abuse for File Transfer

Adversaries may abuse the Windows Certreq utility to download files or upload data to a remote URL by making an HTTP POST request, potentially for command and control, defense evasion, or exfiltration.

Windows lolbin certreq command-and-control defense-evasion exfiltration
2r 4t