Fingerprint egress channels before delivering a payload

Learn which outbound paths a host allows first, then pick a C2 channel that blends with normal traffic.