MITRE ATT&CKsoftware (malware)
S1187 reGeorg
- Domain
- enterprise
- Platforms
- Network Devices, Windows, macOS, Linux
- Version
- 1.0
- Created
- 2025-01-06
Description
reGeorg is an open-source web shell written in Python that can be used as a proxy to bypass firewall rules and tunnel data in and out of targeted networks.
Related
Uses · MITRE ATT&CK (10)
- T1071.001 Web Protocols sub-technique
- T1572 Protocol Tunneling technique
- T1059.006 Python sub-technique
- T1021.001 Remote Desktop Protocol sub-technique
- T1021.002 SMB/Windows Admin Shares sub-technique
- T1021.004 SSH sub-technique
- T1505.003 Web Shell sub-technique
- T1090 Proxy technique
- T1095 Non-Application Layer Protocol technique
- T1105 Ingress Tool Transfer technique
References
- https://www.fortiguard.com/encyclopedia/ips/47584/regeorg-http-tunnel Fortinet reGeorg MAR 2019
- https://github.com/xl7dev/WebShell/tree/master/reGeorg-master GitHub reGeorg 2016