Interfaces

TLDR: Don't shit where you eat

Note

In this section, I'll be discussing a completely arbitrary term that I came up with (don't know the original name) and the differences between the Operator and Agent interface.

Operator vs Agent Interface

The operator interface is simply the interface that handles transactions between the client and the teamserver, likewise the agent interface handles transactions between the implant and the teamserver.

Why separate the interfaces?

The operator interface is usually ONE mode of transport that directly connects an operator with the teamserver. However, the agent interface depends on what listeners are available on the teamserver.

For example, if an implant is run with the HTTP beacon- the agent interface would be via the HTTP listener (Port 80). However, if the implant is run with an SMB beacon- the agent interface would be via the SMB listener (Port 139/445).

Diagram