Say someone is using Linux Mint but with a VPN and kill-switch on. Say an adversary is targeting this person for persistent malware and exfiltration of data. Say the adversary has at least one kernel exploit or OS exploit to use on the target but doesn’t have access to the end server or web browsing activity of the target; the attacker only has access to the Wifi network or MITM position. Does their kernel/OS exploit work against the target if the target’s traffic is encrypted with a VPN? Same question for just basic TLS/SSL when browsing the web.

I can’t make the connection. If I make a new file only with weevely backdoor it works fine but if I try to copy and paste the code inside of a existing .php file it doesn’t work although the original part of the .php file stills works.
For example if I put the backdoor inside index.php I cannot get the connection through weevely but on the website the index.php its working fine.

anyone ever managed to do it?

Similar to an earlier post, what would someone need to convert a regular USB or SD/MicroSD card to a USB Rubber Ducky.

I’ve seen several videos and instructions but wanted more first-hand experiences or recommendations on github or other resources to use.

Alternatively, has anyone made their own “OMG cable”? How did it go? And what did you need to do it?

Lastly, cost wise, what’s more effective. Purchasing the pre-made devices, or building your own? Taking into account all of the aspects (security, lack or excess of potentially tracing purchases, knowledge gained and used, time, actual cost, etc.) as “cost”.

I was wondering if there’s a way to monitor the traffic going from/to an app to see if it’s malicious or any good info about that topic?