logo

How to Bypass Web-Proxy Filtering

ID: ee35aa0e-3c5b-58be-ade2-1703b2d9732c

STIX ID: report--ee35aa0e-3c5b-58be-ade2-1703b2d9732c

Feed Name: Black Hills Infosec Blog

Date Published: 2017-04-13

Date Updated: 2026-04-27

Author: BHIS

...
...

This blog post documents a technique called domain-categorization takeover to bypass web-proxy and egress filtering: re-register a recently expired domain that still has a benign category, point its A record to a C2/testing server, obtain a trusted SSL certificate, host payloads, and run listeners (examples use msfvenom and meterpreter). It’s presented as a step-by-step guide for testing/assessment and references related C2 methods (ICMP/DNS tunneling, email-based channels, and domain-fronting).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.