Bypassing Firewalls with DNS Tunnelling (Defence Evasion, Exfiltration and Command & Control)

[@theburtmacklin9615]

Andy, your videos are light years ahead of so many the “cyber / IT security”videos that litter KZbin. Content quality and clarity, production value, etc. is all there in spades; I don’t understand how your sub / view counts aren’t much much higher.

[@rot169]

Thank you, that's so very kind of you! I'm clearly not as skilled at building an audience 🤣 Slowly growing though!!

[@anonymousgirl5150]

@@rot169 I'm following a lot of cyber security channels for years , and yours is definitely going places. buckle up, lift of in 10..9..

[@rot169]

Thank you! I really appreciate the kind words! Please do share with any friends/colleagues who you think might be interested :-)

[@anonymousgirl5150]

@@rot169 of course!

[@anonymous-ds3mc]

Straight to the point, short, simple yet informative. Subbed!

[@skm5779]

People like you makes KZbin a great learning platform. Please continue with this spirit forever. Thank You 🙂

[@bobbyb42]

I love the flow of your videos. Feel like I actually retain all the information from the video because of the clear and concise structure. Hope you keep making videos

[@gitgudsec]

holy crap this is so good, the way you "embedded" the CLIs popping out from the network diagram, bringing wshark into the mix etc - grande pedagogical display, *tips hat*

[@gitgudsec]

also speeding up your browsing, respecting the viewers time, A/D/D format etc. glad i discovered you today.

[@Heeby-Jeebies]

Your presentation is clear, concise, and very well laid out. Thanks!

[@septimusseverus252]

This channel is just simply AMAZING

[@rot169]

Thank you for the kind words!! Please do share any videos with friends/colleagues who you think might also be interested :-)

[@aminvogue]

A ton of quality info neatly packed in a small video............... Andy's Magic. Thanks

[@rot169]

Thanks, it's great to hear you found it useful :-)

[@CharlesHayden]

Awesome presentation describing all the different angles in which to view this from.... 🙏🏾🙌🏾🙏🏾

[@darshilmehta9905]

Underrated channel. Require more videos on Attack as well as Defense Side

[@the_hypnotoucan]

Great explanation! Thanks for including demos on the Kali Linux side and the client side.

[@jorgebarroso2496]

Great video! I have just started working around DNS tunneling and your video was very helpful :)

[@Dips_M]

Excellent content, one of the most underrated security channels on youtube! Thank you

[@matthewp7586]

Brilliant Video. Logical flow, understandable.

[@karim3741]

Flawless Explanation, loved it 👌❤️

[@ashpakpinjari9214]

You're unstoppable! ‼️

[@AdityaKumar-ei4ch]

Very nice video loved it! the animation !

[@rot169]

Thanks! Animation is certainly not my strong point, but making the graphics for these videos has turned me into a PowerPoint master! 😅 I'm trying to avoid having to switch to After Effects for as long as possible!

[@khanstudy3589]

[phone] for this video. All cleared

[@jamel9876]

Wow. So informative! Keep em coming!

[@PubRunner]

I have a web server running that has a gps server that has a self signed certificate and I use TailScale to bypass where I works firewall that disallowed connections to sites with self signed or invalid certificates. While what I am running is benign, I could in theory and anything running. I also use TailScale to access Files I need from time to time that I don’t want to keep a copy on the laptop (which I own) that I use for work. I cannot connect to my GPS server at all if I use its full URL but can if I use its local host name of their network. I use my GPS server to calculate mileage on my personal vehicles which I get compensated for use during work hours and I can prove my location and route between sites if that is ever questioned. I should also add that the portion of the network I have access to at where I work isn’t the main secure backbone only authorised company owned PCs have access that.

[@NOT-A-Monolith]

Can this effect cellphones like andoird. Cause I went on a website and accepted the link but soon after my phone ask for private access and should only be accepted by my service provider but I've declined So would my phone be infected

[@vibrato17]

I'm confused, at 2:40, the attacker seems to already have access to the victim machine in order to run dnscat, so why is DNS tunneling even needed?

[@a28bre55]

Good question. Hope he answers it.

[@pradeepkumarpalanisamy2425]

This is sort of post exploitation attack to deploy command and control mechanism and can greatly help hacker in exfiltrating the data.

[@machinelearningdojowithtim2898]

Awesome video Andy!

[@j_r0w]

Very informative and quality video, thanks! Subbed :)

[@michaelwaterman3553]

This was cool, thanks!

[@sanron4256]

Awesome videos.

[@trebbomb25]

Why would the client go to the hacker's domain in the first place? Before this attack can happen i would imagine some type of web spoofing would need to happen correct? As the hacker's DNS server only accepts queries for that one specific domain?

[@rot169]

This technique is specifically around achieving an exfil/C2 channel; a real-world attack would depend on some other technique being used (maybe just a simple phish?) to get the attacker's code running on their victim's machine. I hope this helps! :-)

[@trebbomb25]

@@rot169 definitely, thanks!

[@thewhiterabbit661]

Very good channel thank you

[@manqingzhou2925]

great content

[@bellamymusicofficial7915]

Please keep it up sir 🍻

[@darkanyons]

Wow! thanks!

[@harshamannewton]

the speed sucks tho....any idea to increase speed?

[@rot169]

DNS Tunnelling is an inefficient means of transferring data, so there's not much you can really do to improve the speed of it. Which is good from a defender's point of view as it means there's more time to detect and respond to large data transfers.

[@RakibHasan-hs1me]

I will stick around till the attacking path

[@sul3y]

Man youre amazing

[@josephlustigiermbong5121]

Très bonne vidéo merci beaucoup +1 abonné

[@rot169]

Merci Joseph! :)

[@mylife3003]

Good

[@HughJass-jv2lt]

❤❤

[@user-cf5su4te9s]

skills only for windows ? attack| defect| defent ... no web attacks ? no linux attacks skills ...

[@rot169]

Haha, yeah just Windows for now... although I have other non-windows topics in the pipeline, so stay tuned... :-)

[@nxhad]

how do i setup dnscat2 on windows?

[@Mohitkumar-ug8jq]

u r too fast

[@nilbatteysannata1982]

Great content.