fatedier. (n.d.). What is frp?. Retrieved July 10, 2024.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1046 Network Service Discovery |
ToolFRP | As part of load balancing FRP can set `healthCheck.type = "tcp"` or `healthCheck.type = "http"` to check service status on specific hosts with TCPing or an HTTP request. |
| T1049 System Network Connections Discovery |
ToolFRP | FRP can use a dashboard and U/I to display the status of connections from the FRP client and server. |
| T1059.007 JavaScript |
ToolFRP | FRP can support the use of a JSON configuration file. |
| T1071.001 Web Protocols |
ToolFRP | FRP has the ability to use HTTP and HTTPS to enable the forwarding of requests for internal services via domain name. |
| T1090 Proxy |
ToolFRP | FRP can proxy communications through a server in public IP space to local servers located behind a NAT or firewall. |
| T1090.003 Multi-hop Proxy |
ToolFRP | The FRP client can be configured to connect to the server through a proxy. |
| T1095 Non-Application Layer Protocol |
ToolFRP | FRP can communicate over TCP, TCP stream multiplexing, KERN Communications Protocol (KCP), QUIC, and UDP. |
| T1572 Protocol Tunneling |
ToolFRP | FRP can tunnel SSH and Unix Domain Socket communications over TCP between external nodes and exposed resources behind firewalls or NAT. |
| T1573.001 Symmetric Cryptography |
ToolFRP | FRP can use STCP (Secret TCP) with a preshared key to encrypt services exposed to public networks. |
| T1573.002 Asymmetric Cryptography |
ToolFRP | FRP can be configured to only accept TLS connections. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
