p3tr0v
p3tr0v
I have the same problem with Geo_IP. How did you configure the _"Plugin.Enrichment_reversedns_nameserver"_ ?
Unable to establish C2 Session DNS implant or having stability issues with the C2 Beacon DNS implant
Hi @MelCrypto and @DominicBreuker I'm trying to reproduce DNS tunneling in my lab, but whenever I execute the implant in Windows target I dont see any answer from my Sliver,...
@twiss Same question here, how can we use `DecryptAttachmentWithKey` in the right way? ``` package main import ( "os" "strings" "testing" "github.com/ProtonMail/gopenpgp/v2/crypto" "github.com/ProtonMail/gopenpgp/v2/helper" ) func TestCreate(t *testing.T) { arqByte, _...
> Hi. `messagePGP` already contains a key packet with the encrypted session key. > > ``` > keyPacket := messagePGP.GetBinaryKeyPacket() > dataPacket := messagePGP.GetBinaryDataPacket() > ... > ... := helper.DecryptAttachmentWithKey(privkey,...
All the code here: Generating key pairs; Encrypting; Decrypting. ``` package main import ( "io" "os" "testing" "github.com/ProtonMail/gopenpgp/v2/crypto" ) func TestCreatePGPkeys(t *testing.T) { //It happens ONLY in server side privateKey,...
@MelCrypto according [Dynu doc](https://www.dynu.com/Resources/Tutorials/DomainRegistration/HowToSetNameServers), the NS is `ns1.dynu.com`
@MelCrypto according [Dynu doc](https://www.dynu.com/Resources/Tutorials/DomainRegistration/HowToSetNameServers), the NS is `ns1.dynu.com` > , you need to create a NS entry for that sub zone so that Hi @MelCrypto thanks! The log of debug...
ok... so far, I found a service where I can register a NS record, I registered c2.myc2dns.kozow.com; then I generated another implant with debug mode. In wireshark I see .c2.myc2dns.kozow.com...
Thanks @DominicBreuker for your help. Yes, `A` record for c2.myc2dns.kozow.com points to the IP of my Sliver server. > If yes, try adding an NS record for "host" foo.myc2dns.kozow.com that...
@DominicBreuker when I type for dig command, looking for myc2dns.kozow.com, I dont have any answer... Seems that ClouDNS just don't publish the NS record register.