fox-it / Cobaltstrike Extraneous Space
Historical list of {Cobalt Strike,NanoHTTPD} servers
Stars: ✭ 119
Historical list of {Cobalt Strike,NanoHTTPD} servers
This repository contains a historical list of Cobalt Strike (or NanoHTTPD) hosts that have been identified using the "extraneous space" fingerprint.
Read more about this technique in the following blog post:
The list is a CSV file with ip, port, first_seen, last_seen pairs, starting from 2014-01 till 2019-04-21 and can be found here:
The data is derived from Rapid7 Labs OpenData sets which has a historical archive of HTTP and HTTPS scan data: https://opendata.rapid7.com
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].