alphasoc / flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.
https://alphasoc.com
Other
1.25k stars 132 forks source link

simulator/encrypted-dns: new encrypted DNS module #41

Open kmroz opened 3 years ago

kmroz commented 3 years ago

DoH and DoT. TODO: DNSCrypt

kmroz commented 3 years ago

Covers: https://github.com/alphasoc/flightsim/issues/19

Wanted to run this by you guys to see if you're happy with the approach.

DoH - JSON where possible, wire DNS protocol where needed. DoT - Of the listed providers by Chris, only OpenDNS has no plans for DoT. Still need to figure out DNSCrypt. Will rebase this on top of https://github.com/alphasoc/flightsim/pull/40 to get the iface/bind changes as well.

kmroz commented 2 years ago

Before we push this through, I'd like to do a test run on Windows (today).

Also, for dnscrypt, I've not had luck using TCP as a communication protocol. Not sure if this is to do with the servers I've thus far tested against, or the backend lib that's pulled together from a couple of different sources. UDP works well. I'll open a ticket for myself to investigate further.