Tunnelling

Waiting for goDoH

24 October 2018 ~9 min By Leon Jacobs
Bypass Command Execution Dns Experiment Ioc Malware Research Tools Tunnelling
or DNS exfiltration over DNS over HTTPS (DoH) with godoh “Exfiltration Over Alternate Protocol” techniques such as using the Domain Name System as a covert communication channel for data exfiltration is not a new concept. We’ve used the technique for many years at SensePost, including Haroon & Marco’s 2007 BH/DC talk on Squeeza. In the present age this is a well understood topic, at least amongst Infosec folks, with a large number of resources, available, online that aim to enlighten those that may not be familiar with the concept. There are also practical techniques for detecting DNS Tunnelling on your network.

USaBUSe Linux updates

10 March 2017 ~5 min By Rogan Dawes
Abuse Backdoor Build-It Conferences Empire Exploit Hardware Internals Linux Metasploit Programming Real-World Research Shells Tunnelling
(If you’re new to this project, read the intro first) For the past few months, I’ve been working on porting the USaBUSe stack from the custom hardware (AVR+ESP8266) to the Linux USB gadget stack. I wanted to make the techniques more accessible to people unfamiliar with embedded development, and I also wanted to take advantage of the variety of possibilities inherent in having a fully featured Linux environment to work in. I presented this work at HackCon in Norway.