New answers tagged

0 votes
Accepted

Snort rule doesn't match the content in Meterpreter session packet

This analysis was based on the provided pcap and config. Looking at the pcap there are packets which have a correct TCP checksum and packets which don't - wich can happen if TCP checksum is offloaded ...
Steffen Ullrich's user avatar

Top 50 recent answers are included