
BOFScale: CDN-Fronted Tailnet from BOF Privilege Escalation
BOFScale is a NetSPI red-team technique/tool that uses a Beacon Object File (BOF) to escalate privileges and join a target host to a Tailscale tailnet, fronted by a CDN to blend C2 traffic with legitimate-looking domains. This lets operators establish a resilient, low-noise command-and-control channel that leverages Tailscale's mesh networking rather than traditional listener infrastructure.
TL;DR A Cobalt Strike BOF that privesc's and pivots C2 onto a CDN-fronted Tailscale tailnet.
Organisations named here
- Beacon Object File
- BOF
Technologies named here
- Tailscale
- Cobalt Strike
Related in Offensive Security