In this video we'll be exploring how to attack, detect and defend against DNS Tunnelling, a technique that can bypass certain firewall restrictions and provide an attacker with a command & control and data transfer channel. It can also be used to bypass many of the Captive Portals found on public wifi networks.
If you find the video useful please do give it a like, and consider subscribing if you want more of this sort of content. Drop a note in the comments if there’s anything you think I missed, or if you have a good idea of what topic I should cover next.
Further reading/watching:
Mitre ATT&CK on DNS Tunnelling: attack.mitre.o...
Cynet article on DNS Tunnelling: www.cynet.com/...
DNScat2 project page: github.com/iag...
Iodine project page: github.com/yar...
SANS Paper on Detecting DNS Tunnelling: www.giac.org/p...
SecurityOnion: securityonions...
Cisco OpenDNS: www.opendns.com
Audio Credits (licensed under CC0):
Intro/Outro Music by Flavio Concini (freesound.org/...)
Transition audio: "Ethereal Woosh" by Newagesoup (freesound.org/...)
Graphics credits:
Icons: Sketchy Collection by Ralf Schmitzer, licensed under CCBY (thenounproject...)
Timestamps:
0:00 Intro
2:08 Attack
5:49 Detect
6:53 Defend
16 авг 2024
