t3l3machus / hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
BSD 2-Clause "Simplified" License
3.05k stars 482 forks source link

Added support for hosting payload over custom DNS server #35

Open shariqmalik opened 2 years ago

shariqmalik commented 2 years ago

Added -dns or --dns-server options to start a DNS server on port 53. On the victim's computer, the DNS payload will be executed, and the chunks of TXT records will be received to construct the actual payload. The DNS server will also attempt to resolve the fake domain name provided with the -d argument and will return the fake/false information. This way, you can use a fake domain name to transmit the payload to the victim machine.

This approach was developed to keep the real payload hidden from researchers' sight.

Screenshot: DNS-SERVER-Support