Skip to content

Instantly share code, notes, and snippets.

@wesinator

wesinator/BONDUPDATER_DNS_decoder.py

Created April 12, 2019 21:21
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save wesinator/39f00de907a700922870b699ae50e7c9 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save wesinator/39f00de907a700922870b699ae50e7c9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
BONDUPDATER_DNS_decoder.py
# https://www.netscout.com/blog/asert/tunneling-under-sands
import binascii
data = 'EBB466767667256666772556776662FBFD932F3F64079E4F730B65239FE0'
exfil_data = []
for x in range(int(len(data)/2)):
try:
exfil_data.append(binascii.unhexlify(data[x] + data[int(len(data)/2)+x]))
except:
exfil_data.append(data[x] + data[int(len(data)/2)+x])
print(''.join(exfil_data))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment