Skip to content

Back to the catalog

BOFScale: CDN-Fronted Tailnet from BOF Privilege Escalation
netspi.comtool

BOFScale: CDN-Fronted Tailnet from BOF Privilege Escalation

BOFScale is a NetSPI red-team technique/tool that uses a Beacon Object File (BOF) to escalate privileges and join a target host to a Tailscale tailnet, fronted by a CDN to blend C2 traffic with legitimate-looking domains. This lets operators establish a resilient, low-noise command-and-control channel that leverages Tailscale's mesh networking rather than traditional listener infrastructure.

TL;DR A Cobalt Strike BOF that privesc's and pivots C2 onto a CDN-fronted Tailscale tailnet.

Organisations named here

  • Beacon Object File
  • BOF

Technologies named here

  • Tailscale
  • Cobalt Strike