# ZIPLINE
> Tipo: **malware** · S1114 · [MITRE ATT&CK](https://attack.mitre.org/software/S1114)
## Descrição
[[s1114-zipline|ZIPLINE]] é um backdoor passivo utilizado durante a operação [[cutting-edge|Cutting Edge]] em VPNs Secure Connect comprometidas, para funcionalidades de reverse shell e proxy.
**Plataformas:** Network Devices
## Técnicas Utilizadas
- [[t1090-proxy|T1090 - Proxy]]
- [[t1057-process-discovery|T1057 - Process Discovery]]
- [[t1205-traffic-signaling|T1205 - Traffic Signaling]]
- [[t1095-non-application-layer-protocol|T1095 - Non-Application Layer Protocol]]
- [[t1562-001-disable-or-modify-tools|T1562.001 - Disable or Modify Tools]]
- [[t1573-001-symmetric-cryptography|T1573.001 - Symmetric Cryptography]]
- [[t1059-004-unix-shell|T1059.004 - Unix Shell]]
- [[t1083-file-and-directory-discovery|T1083 - File and Directory Discovery]]
- [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]]
## Referências
- [MITRE ATT&CK - S1114](https://attack.mitre.org/software/S1114)