Welcome to Pluralsight in this cybersecurity tools course,
featuring Merlin, the open‑source command and control tool
developed and maintained by Russell Van Tuyl.
As intrusion detection systems become more advanced,
it's important as ever to mimic real application traffic.
And, as you'll soon see,
Merlin's got you covered by leveraging newer versions of HTTP such as HTTP
version 2 or HTTP version 3 as a transport mechanism. However,
all of these advanced tactics don't mean anything if
you use Merlin in the wrong way.
So in this course, you will test various attacks in a
Docker‑based simulation environment.
Even better,
you'll mount your attacks against two intrusion detection
systems with the goal of performing data exfiltration. And I'm
warning you now, you might get caught, but that's okay.
You will learn to adjust. If you're a red teamer looking to evade
detection by a novel C2 transport mechanism or a blue teamer
looking for the latest attack patterns, come join me to get up
and running with Merlin today.