DNS Exfiltration and Tunneling with AWS скачать в хорошем качестве

DNS Exfiltration and Tunneling with AWS

Term final project for IST 554 (Network Management and Security) at Penn State University for a Masters degree in Cybersecurity. We demonstrate how to receive a command from a C&C server, exfiltrate sensitive data, and create a two-way tunnel for arbitrary TCP/IP traffic from a completely locked-down secure system behind a firewall. Demonstration setup includes an Amazon Virtual Private Cloud in the N. Virginia availability zone (AZ) with a public and private subnet. There's a NAT firewall and bastion host in the public subnet and target secure system (TSS) in the private subnet. Network access control lists (NACLs), security groups (SGs), and IPTABLES rules prevent all traffic except DNS out of the TSS. We have an accomplice name server (ANS) in the Frankfurt, Germany AZ through which we'll communicate with and create a tunnel to the TSS, despite the security.