4 ms·
Sorry to rain on your parade, but Dan Kaminsky additionally wrote an implementation called ozymandns in 2005 or so: http://dnstunnel.de/ http://dnstunnel.de/
by cypherpunks01 13y ago
Sorry to rain on your parade, but Dan Kaminsky additionally wrote an implementation called ozymandns in 2005 or so:
http://dnstunnel.de/ http://dnstunnel.de/
I use it when I need an ssh or web connection in extremely hostile environments that only allow free DNS queries out, like some planes, buses, establishments, etc.
There are also links to other implementations here: http://en.cship.org/wiki/OzymanDNS http://en.cship.org/wiki/OzymanDNS
- 16s 13y agoThose examples tunnel traffic over DNS. They do not specifically break large files up into small chunks and exfiltrate them off of a secure network with simple DNS queries.
- cypherpunks01 13y agoSure, yes. All those examples (ozyman, iodine, etc.) tunnel arbitrary traffic over DNS, whereas yours is more traffic-efficient in essentially being a static file server via DNS, I suppose?
- amckenna 13y agoTunneling traffic over DNS is breaking up files (data) into chunks (packets) and exfiltrating off of a network through DNS. Don't get me wrong, it's nice to see a simple example like yours, but projects like http://code.kryo.se/iodine/ http://code.kryo.se/iodine/ do essentially (from an abstract perspective) the same thing.
- deleted 13y ago[deleted]
- darklajid 13y agoBut scp localfile user@tunnelhost:/some/place does that. The sample is cool, I really like digging into that stuff. But it's not really different from ozyman/iodine.