Forum Discussion
APT34: PoisonFrog - Question 6
For the What is the name of the file that executes the HTTP and DNS handling scripts?, I am confused on where I should be digging deeper as the powershell script was showcased to be wrong in terms ...
SamDickison
Community Manager
Community ManagerHey kevinh since it's been a few days, I tried to find a hint for you. I hope it helps:
"Look closely at how the PoisonFrog C2 framework is structured on the filesystem. The framework relies on a main orchestration file (often a PowerShell or server-side script) that listens for connections and serves as the master coordinator for those individual HTTP and DNS protocol-handling scripts."
I hope that's correct. Perhaps a Community member can give you a better tip....
