Hacker Hermanos Cybersecurity articles on red teaming, cloud security, and defense. https://hackerhermanos.com/feed.xml 2026-08-21T00:00:00Z Hacker Hermanos Traffic Filtering for C2 Redirectors https://hackerhermanos.com/posts/traffic-filtering-c2-redirectors/ 2026-08-21T00:00:00Z 2026-05-07T00:00:00Z Layered C2 redirector filtering uses network controls, User-Agent validation, HTTP methods, URI paths, headers, IP blocks, and cookie checks in order. Splunk BOTS V1: Ransomware https://hackerhermanos.com/posts/splunk-bots-v1-ransomware/ 2026-08-21T00:00:00Z A walkthrough of Splunk's Boss of the SOC (BOTS) V1 ransomware scenario: blue-team threat hunting with SPL across Windows, Sysmon, and network log data. Serverless C2 Redirectors with AWS Lambda https://hackerhermanos.com/posts/serverless-c2-redirectors/ 2026-08-21T00:00:00Z 2026-04-02T00:00:00Z Build a serverless C2 redirector using AWS Lambda and API Gateway, deployed with Terraform. No persistent server, no attack surface, teardown in one command. Layered Red Team C2 Infrastructure: Architecture https://hackerhermanos.com/posts/red-team-c2-infrastructure/ 2026-08-21T00:00:00Z 2026-02-20T00:00:00Z A deep dive into layered red team C2 infrastructure design, covering CDNs, redirectors, and trust boundaries to protect your C2 server from defender discovery. Three Ways to Hide C2 in Trusted Traffic https://hackerhermanos.com/posts/hiding-c2-in-trusted-traffic/ 2026-08-21T00:00:00Z 2026-03-23T00:00:00Z Hide C2 communications in traffic a SOC already trusts with domain fronting, cloud service tunneling, and dead drops that reduce defender visibility. When Azure Relay Becomes a Red Teamer's Highway https://hackerhermanos.com/posts/azure-relay-red-teamer/ 2026-08-21T00:00:00Z Learn how red teamers can leverage Microsoft's Azure Relay Bridge for covert command and control channels that bypass enterprise security controls. When AWS IoT Secure Tunneling Opens the Door From the Inside https://hackerhermanos.com/posts/aws-iot-secure-tunneling-red-teamer/ 2026-08-21T00:00:00Z AWS IoT Secure Tunneling reaches a host inside a target network from a tunnel in the operator's own AWS account, with no control-plane record in the target's. AWS IoT Core MQTT: A C2 Credential Measured in Years https://hackerhermanos.com/posts/aws-iot-mqtt-red-teamer/ 2026-08-21T00:00:00Z Running a C2 agent over AWS IoT Core MQTT: an X.509 certificate identity measured in years, MQTT over port 443 via ALPN, and the 128 KB message-size cap.