冰蝎与蚁剑的流量特征

冰蝎和蚁剑都是常见的远程控制工具（RAT），它们在流量中有一些特征可以用来进行识别。

针对蚁剑的流量特征，一般而言，它的参数名大多以"_0x..."的形式出现，后面跟着加密的数据包。这种形式的参数名可以作为蚁剑流量的一个明显特征。<span class="em">1</span><span class="em">2</span><span class="em">3</span>
#### 引用[.reference_title]
- *1* [菜刀、冰蝎、蚁剑、哥斯拉的流量特征](https://blog.csdn.net/eternitymd/article/details/124492261)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 33.333333333333336%"]
- *2* [2020明湖论剑PPT汇总（6份）.zip - 工控安全](https://download.csdn.net/download/testvaevv/73182921)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 33.333333333333336%"]
- *3* [菜刀，蚁剑，冰蝎，哥斯拉的流量特征](https://blog.csdn.net/qq_51550750/article/details/125607789)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 33.333333333333336%"]
[ .reference_list ]