DNS Tunneling: how DNS can be (ab)used by malicious actors
DNS is a critical foundation of the Internet that makes it possible to get to websites without entering numerical IP addresses. The power that makes DNS beneficial for everyone also creates potential for abuse. Unit 42 researchers explain how attackers can abuse DNS to hide their tracks and steal da…
unit42.paloaltonetworks.com
感覺上不是一個可以單獨使出的招式, 攻擊者必須掌控DNS server才能發動.
中間只要有個Big-IP F5或是任何過濾DNS traffic這攻擊就GG了. 不過實際上的攻擊總是各種組合拳, 所以還是不能小看…
