OpenSSH9.6p1 Ubuntu 3ubuntu13.14

SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.14
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBnum6M3OnqVAhOaVZWOwUfu
XZCs+tVJEBbjWc3/5w6nhHCW+He+B7g+YkUkRS82aS5AVjo2wRJ6S66NAQ7E2vs=
Fingerprint: 13:86:be:ca:f6:30:d3:12:4b:9a:20:1c:83:01:66:72

Kex Algorithms:
	sntrup761x25519-sha512@openssh.com
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	ext-info-s
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

nginx

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Oct 2026 14:00:00 GMT
Content-Type: text/html
Content-Length: 542
Last-Modified: Fri, 09 Oct 2026 07:45:14 GMT
Connection: keep-alive
ETag: "6ac89b8a-21e"
Cache-Control: no-cache
Accept-Ranges: bytes

Cobalt Strike Beacon

HTTP/1.1 404 Not Found
Date: Sat, 17 Oct 2026 16:15:34 GMT
Server: Apache
Content-Length: 0
Keep-Alive: timeout=10, max=100
Content-Type: text/plain
Connection: Keep-Alive


Cobalt Strike Beacon:
  x86:
    beacon_type: HTTP
    dns-beacon.strategy_fail_seconds: -1
    dns-beacon.strategy_fail_x: -1
    dns-beacon.strategy_rotate_seconds: -1
    http-get.client:
      Accept: text/html, application/xhtml+xml, image/jxr, */*
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US; q=0.7, en; q=0.3
      Connection: keep-alive
      DNT: 1
      accept
    http-get.uri: 101.35.217.145,/css3/index2.shtml
    http-get.verb: GET
    http-post.client:
      Accept: text/html, application/xhtml+xml, */*
      Accept-Encoding: gzip, deflate
      DNT: 1
      Content-Type: application/x-www-form-urlencoded
      token=
      Cookie
      input=
    http-post.uri: /tools/family.html
    http-post.verb: POST
    jitter: 37
    maxgetsize: 2139336
    port: 8081
    post-ex.spawnto_x64: %windir%\sysnative\notepad.exe
    post-ex.spawnto_x86: %windir%\syswow64\notepad.exe
    process-inject.allocator: 1
    process-inject.execute:
      ntdll.dll:RtlUserThreadStart
      NtQueueApcThread-s
      kernel32.dll:LoadLibraryA
      CreateRemoteThread
      RtlCreateUserThread
      SetThreadContext
    process-inject.min_alloc: 24576
    process-inject.startrwx: 4
    process-inject.stub: ae5afcfee8026674dc8f3b4f2da46c7f
    process-inject.userwx: 32
    proxy.behavior: 2 (Use IE settings)
    server.publickey_md5: 35ec8010fa1d6efe75b77c245e9c8b56
    sleeptime: 3000
    stage.cleanup: 1
    useragent_header: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
    uses_cookies: 1
    watermark: 987654321
  x64:
    beacon_type: HTTP
    dns-beacon.strategy_fail_seconds: -1
    dns-beacon.strategy_fail_x: -1
    dns-beacon.strategy_rotate_seconds: -1
    http-get.client:
      Accept: text/html, application/xhtml+xml, image/jxr, */*
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US; q=0.7, en; q=0.3
      Connection: keep-alive
      DNT: 1
      accept
    http-get.uri: 101.35.217.145,/css3/index2.shtml
    http-get.verb: GET
    http-post.client:
      Accept: text/html, application/xhtml+xml, */*
      Accept-Encoding: gzip, deflate
      DNT: 1
      Content-Type: application/x-www-form-urlencoded
      token=
      Cookie
      input=
    http-post.uri: /tools/family.html
    http-post.verb: POST
    jitter: 37
    maxgetsize: 2139336
    port: 8081
    post-ex.spawnto_x64: %windir%\sysnative\notepad.exe
    post-ex.spawnto_x86: %windir%\syswow64\notepad.exe
    process-inject.allocator: 1
    process-inject.execute:
      ntdll.dll:RtlUserThreadStart
      NtQueueApcThread-s
      kernel32.dll:LoadLibraryA
      CreateRemoteThread
      RtlCreateUserThread
      SetThreadContext
    process-inject.min_alloc: 24576
    process-inject.startrwx: 4
    process-inject.stub: ae5afcfee8026674dc8f3b4f2da46c7f
    process-inject.userwx: 32
    proxy.behavior: 2 (Use IE settings)
    server.publickey_md5: 35ec8010fa1d6efe75b77c245e9c8b56
    sleeptime: 3000
    stage.cleanup: 1
    useragent_header: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko
    uses_cookies: 1
    watermark: 987654321

HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
content-length: 6330
server-timing: total;dur=2.632, render;dur=1.02
x-content-type-options: nosniff
x-download-options: noopen
x-robots-tag: noindex, nofollow
referrer-policy: no-referrer
server: granian
date: Sat, 17 Oct 2026 14:42:18 GMT

Cobalt Strike C2

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842189082 (0x6dcd931a)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=There, ST=Over, L=Around, O=Pwn3rs, OU=AdvancedReversing, CN=Pwn3rs Striked
        Validity
            Not Before: Sep 23 07:54:52 2026 GMT
            Not After : Dec 22 07:54:52 2026 GMT
        Subject: C=There, ST=Over, L=Around, O=Pwn3rs, OU=AdvancedReversing, CN=Pwn3rs Striked
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    a9:24:17:79:36:56:f6:ec:0f:14:fe:7b:48:13:b9:3c:
                    f4:a1:36:66:b4:55:ac:e5:af:18:6f:b1:e3:07:a3:c8:
                    e4:58:6d:41:20:ba:09:da:2a:10:7a:90:a6:24:d6:af:
                    ce:59:c1:56:9b:6f:a2:43:f3:a9:3f:69:58:84:b0:07:
                    0b:21:de:6b:c7:2b:d6:7a:a8:1b:cd:7d:a5:b1:41:36:
                    9c:04:e7:e4:cd:3a:19:d7:f9:e2:bc:f4:01:57:ae:f7:
                    78:3b:d9:02:55:58:9f:03:4e:1c:ff:64:ef:29:6f:a8:
                    26:9d:bc:cf:6c:57:85:e3:7a:f7:50:32:eb:61:95:c5:
                    66:0f:01:06:d9:ce:2b:87:d6:ae:b4:18:56:01:fd:18:
                    a1:19:db:c0:4e:5e:7b:06:50:eb:8b:a5:f3:bc:ef:9a:
                    15:1f:f6:2a:07:f7:57:f2:71:48:f4:98:9d:a5:a0:b3:
                    9d:a2:47:12:72:24:cd:13:29:3b:fa:2b:88:3b:53:16:
                    d9:4e:5d:d4:88:8b:c8:ff:7d:b5:61:7b:4a:a8:e7:6d:
                    17:f9:7f:e2:cb:f2:d0:2b:ff:89:c7:ec:86:3b:6b:8a:
                    81:6f:a7:56:cf:14:b6:cd:b2:55:84:20:8a:20:bb:2f:
                    11:32:26:b2:8b:90:e1:59:43:53:a7:3d:9e:17:41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DF:A4:35:12:A9:3D:A8:23:31:AF:3A:9C:0B:3D:29:AE:AB:8E:7C:F0
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        31:5f:89:01:f8:94:c6:0e:d9:26:4c:dd:e4:90:63:39:25:96:05:71:77:b0:32:48:
        25:79:8e:b5:0b:16:11:1b:37:6d:00:34:46:3a:d3:b9:8f:5f:95:53:b2:b1:db:19:
        da:69:48:3c:c4:fe:cc:27:a6:5b:dd:fe:59:79:6f:9e:61:66:c6:91:7c:1a:34:29:
        f1:0e:4b:ba:d8:d5:4a:4c:c1:36:96:40:00:bc:b9:de:dc:13:7e:a1:0a:bc:7a:6b:
        f1:85:30:5e:9f:71:84:02:a4:90:ca:48:a0:b0:42:f3:2e:7d:01:ec:e5:02:ce:34:
        e0:15:4e:ce:fe:f6:7d:a5:dc:bc:e0:5d:0e:34:06:6e:b2:39:f2:de:11:b9:53:33:
        87:75:2d:3d:90:c5:0c:d7:c6:1c:6f:20:88:f1:53:89:1c:d3:c8:9a:0d:85:69:ef:
        b9:c9:c9:32:50:2b:c7:3b:83:23:f8:0e:f9:9c:a5:ba:bd:fd:36:4a:3f:ec:87:4b:
        7d:94:59:5a:dc:23:3c:87:c1:19:90:1f:58:a8:70:27:d7:ea:89:51:ef:f9:db:08:
        e1:bc:d9:80:ae:13:d3:7b:b9:7e:71:a5:d9:c4:64:9b:2a:e6:b7:92:bf:3b:5a:39:
        31:c1:2f:c6:27:e8:71:f0:8c:c4:a9:34:4d:6e:f1:d3