Explore advanced techniques for DNS data exfiltration in this 27-minute conference talk from BSidesLV 2019. Delve into the world of covert data transmission as Dimitri Fousekis presents "Low & Slow" methods for extracting sensitive information through DNS tunnels. Learn about the systems involved, how to abuse trusted services like Exim Synmail, and witness a live demonstration of DNS tools and lookups. Gain valuable insights into this stealthy approach to data exfiltration and understand its implications for network security.
Overview
Syllabus
Intro
Agenda
What we are covering
Danis tunnels
What systems know
Abuse trusted services
Exim Synmail
Demonstration
DNS Tool
DNS Lookups
Taught by
BSidesLV
Related Courses
-
AWS GuardDuty - Post-DNS Era Covert Channel For C&C
-
DNS Hardening - Proactive Network Security Using F5 iRules and Open Source Analysis Tools
-
The Domain Name System - DNS Operation, Threats, and Security Intelligence
-
DFEx - DNS File Exfiltration
-
State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin
-
Analyzing DNS Traffic for Malicious Activity Using Open Source Logging Tools
