File-transfer-via-DNS
jeudi 13 mars 2014 à 12:33 Ecirtam, le 12/03/2014 à 14:40
Amusant.
Envoyer des données via des requêtes DNS.
via https://shaarli.guiguishow.info/?K70PPA
(Permalink)
CAFAI, le 13/03/2014 à 12:33
You guys already know DNS encapsulation (e.g. dns2tcp) to transfer data over DNS but I've found a very interesting post from Johannes Ullrich who introduces a relatively stealthy concept (https://isc.sans.edu/diary/Packet+Tricks+with+xxd/10306) to transfer data via DNS requests. It consists of sending hex parts of a file as part of DNS requests on one side and to capture and split these DNS requests on the other side. No specific tool is required but tcpdump and xxd.
(Permalink)
Amusant.
Envoyer des données via des requêtes DNS.
via https://shaarli.guiguishow.info/?K70PPA
(Permalink)
CAFAI, le 13/03/2014 à 12:33
You guys already know DNS encapsulation (e.g. dns2tcp) to transfer data over DNS but I've found a very interesting post from Johannes Ullrich who introduces a relatively stealthy concept (https://isc.sans.edu/diary/Packet+Tricks+with+xxd/10306) to transfer data via DNS requests. It consists of sending hex parts of a file as part of DNS requests on one side and to capture and split these DNS requests on the other side. No specific tool is required but tcpdump and xxd.
(Permalink)