reGeorg
- ID
- S1187
- Type
- Malware
- Platforms
- Network Devices, Windows, macOS, Linux
- Source
- attack.mitre.org
- MITRE last modified
- 16 Apr 2025
reGeorg is an open-source web shell written in Python that can be used as a proxy to bypass firewall rules and tunnel data in and out of targeted networks.[1][2]
Techniques used (10)
- T1021.001 Remote Desktop Protocol
- T1021.002 SMB/Windows Admin Shares
- T1021.004 SSH
- T1059.006 Python
- T1071.001 Web Protocols
- T1090 Proxy
- T1095 Non-Application Layer Protocol
- T1105 Ingress Tool Transfer
- T1505.003 Web Shell
- T1572 Protocol Tunneling