Ich habe den DNS Channel PoC mässig implementiert:
Kelvin:
Kelvin:
TCPDUMP:
View image
15:36:11.832808 IP 192.168.1.1.1234 > 192.168.1.47.53: 666+ A? 2.1.666.20201.6.encKey. (40)Wireshark Capture vom Reply Packet:
15:36:11.838413 IP 192.168.1.47.53 > 192.168.1.1.1234: 666 1/0/0 CNAME[|domain]
View image
Leave a comment