Skip to content

Instantly share code, notes, and snippets.

@0xToxin
Created November 13, 2023 07:25
Show Gist options
  • Save 0xToxin/c5c6f91908d9dcb2f872d5b4d21f40be to your computer and use it in GitHub Desktop.
Save 0xToxin/c5c6f91908d9dcb2f872d5b4d21f40be to your computer and use it in GitHub Desktop.
JanelaRat fetches from remote DGA C2's keywords list and the port for the real C2
***************************************
* no keywords path this time :( *
* /postal.php - for C2 port *
***************************************
alpha123.serveblog.net
tango89.myvnc.com
zulu567.onthewifi.com
echo456.redirectme.net
foxtrot234.freedynamicdns.net
bravo789.hopto.org
charlie876.bounceme.net
kilo321.3utilities.com
delta654.servecounterstrike.com
hotel210.ddnsking.com
india987.serveblog.net
juliet543.myvnc.com
victor123.onthewifi.com
whiskey890.redirectme.net
rome456.freedynamicdns.net
lima789.hopto.org
mike234.bounceme.net
november567.3utilities.com
oscar876.servecounterstrike.com
papa321.ddnsking.com
quebec654.serveblog.net
romeo987.myvnc.com
sierra123.onthewifi.com
tango890.redirectme.net
uniform456.freedynamicdns.net
kilo789.hopto.org
victor234.bounceme.net
whiskey567.3utilities.com
xray876.servecounterstrike.com
yankee321.ddnsking.com
zulu654.serveblog.net
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment