Posts

Showing posts with the label Tunneling

Flightsim - A Utility To Generate Malicious Network Traffic In Addition To Evaluate Controls

Image
flightsim is a lightweight utility used to generate malicious network traffic in addition to tending safety teams to evaluate safety controls in addition to network visibility. The tool performs tests to copy DNS tunneling, DGA traffic, requests to known active C2 destinations, in addition to other suspicious traffic patterns. Installation Download the latest flightsim binary for your OS from the GitHub Releases page. Alternatively, the utility tin privy hold upward built using Golang inwards whatever surroundings (e.g. Linux, MacOS, Windows), equally follows: go larn -u github.com/alphasoc/flightsim/... Running Network Flight Simulator Upon installation, examination flightsim equally follows: $ flightsim --help AlphaSOC Network Flight Simulator™ (https://github.com/alphasoc/flightsim) flightsim is an application which generates malicious network traffic for safety teams to evaluate safety controls (e.g. firewalls) in addition to ensure that monitoring tools are able ...

Dnslivery - Slowly Files Together With Payloads Delivery Over Dns

Image
Easy files in addition to payloads delivery over DNS. Acknowledgments This projection has been originally inspired past times PowerDNS in addition to Joff Thyer 's technical segment on the Paul's Security Weekly podcast #590 ( youtu.be/CP6cIwFJswQ ). Description TL;DR DNSlivery allows delivering files to a target using DNS equally the carry protocol. Features : allows to print, execute or salve files to the target does non require whatever customer on the target does non require a full-fledged DNS server  What work are y'all trying to solve? Easily deliver files and/or payloads to a compromised target where classic spider web delivery is non possible in addition to without the take away for a dedicated customer software . This applies to restricted environments where outgoing spider web traffic is forbidden or precisely inspected past times a curious spider web proxy. Even though to a greater extent than consummate DNS tunneling tools already be (...