DNS Tunneling.

Slides:



Advertisements
Similar presentations
DNS, Web, TCP Sequence Numbers EE122 Discussion 10/19/2011.
Advertisements

Domain Name System (or Service) (DNS) Computer Networks Computer Networks Term B10.
20101 The Application Layer Domain Name System Chapter 7.
IST 221 Internet Concepts and Applications Internet, WWW and HTML 1.
Vocabulary URL = uniform resource locator: web address protocol –set of rules that networked computers follow in order to share data and coordinate communications.
1 What is Electronic Mail Exchanging information via computer networks Electronic mail addresses SMTP (Simple Mail Transfer Protocol) Client/Server based.
Lecturer: Maxim Podlesny Sep CSE 473 File Transfer and Electronic in Internet.
Network Management System The Concept –From a central computer, network administrator can manage entire network Collect data Give commands –Moving gradually.
Chapter 29 Domain Name System (DNS) Allows users to reference computer names via symbolic names translates symbolic host names into associated IP addresses.
Web Engineering we define Web Engineering as follows: 1) Web Engineering is the application of systematic and proven approaches (concepts, methods, techniques,
DNS Tunneling Mihir Nanavati & Long Zhang {mihirn, April 19th 2010.
Chapter 19 Binding Protocol Addresses (ARP) A frame transmitted across a physical network must contain the hardware address of the destination. Before.
PRACTICAL INTRODUCTION TO INTERNET TECHNOLOGY. Practical one PACKET DELAY AND LOSS IN INTERNET In this experiment, you will observe real delays and loss.
Unit 2 - Hardware Networking. What is a network? A computer network is essentially a connection between two or more computers. This connection can be.
17 Establishing Dial-up Connection to the Internet Using Windows 9x 1.Install and configure the modem 2.Configure Dial-Up Adapter 3.Configure Dial-Up Networking.
1. Internet hosts:  IP address (32 bit) - used for addressing datagrams  “name”, e.g., ww.yahoo.com - used by humans DNS: provides translation between.
APACHE INSTALL Linux: CentOS 6.5 WHAT IS APACHE Apache is an open source application which is governed by the GNU licensing for use and alteration of.
DOMAIN NAME SYSTEM By Gazain Naeem. Domain Name System is the hierarchical computer system which is connected to the internet. It works like a telephone.
Domain Name System: DNS To identify an entity, TCP/IP protocols use the IP address, which uniquely identifies the Connection of a host to the Internet.
The Domain Name System (DNS) – The online directory DNS Simplified.
APACHE INSTALL AWS Linux (Amazon Web Services EC2)
Internet.
Understand Names Resolution
Dynamic Domain Name System
Introduction to Networks
Session 6 INST 346 Technologies, Infrastructure and Architecture
Comparing Communication Types
HTTP AND ABSTRACTION ON THE INTERNET
Tor Good + Evil.
Domain Name System DNS - A system for converting host names and domain names into IP addresses on the Internet or on local networks that use the TCP/IP.
DNS-sly: Avoiding Censorship through Network Complexity
JavaScript and Ajax (Internet Background)
CNIT 131 Internet Basics & Beginning HTML
Data Communications and Computer Networks Chapter 2 CS 3830 Lecture 9
E-commerce | WWW World Wide Web - Concepts
E-commerce | WWW World Wide Web - Concepts
Some bits on how it works
SUBMITTED BY: NAIMISHYA ATRI(7TH SEM) IT BRANCH
Unit 5: Providing Network Services
ICT Communications Lesson 1: Using the Internet and the World Wide Web
Working at a Small-to-Medium Business or ISP – Chapter 7
Inside of a computer… What happens when you turn your computer on? What loads? Where are applications stored? How are do they run? In what form is information.
Ping Hackathon 2018.
Providing Network Services
Chapter 3: Windows7 Part 4.
Working at a Small-to-Medium Business or ISP – Chapter 7
DoS - DNS Attacks A famous DNS attack was a DDoS "ping" attack. The attackers broke into machines on the Internet (popularly called "zombies") and.
CS222 Web Programming Course Outline
IIS.
Working at a Small-to-Medium Business or ISP – Chapter 7
Network Models, Hardware, Protocols and number systems
TCP/IP Networking An Example
Network Hardware and Protocols
OPS235: Configuring a Network Using Virtual Machines – Part 2
eeweb server PC (web client) Http/tcp/ip/ethernet (src. IP address:
Inside of a computer… What happens when you turn your computer on? What loads? Where are applications stored? How are do they run? In what form is information.
Hyperlinks and Protocols
Web Server Technology Unit 10 Website Design and Development.
HTTP and Abstraction on the Internet / The Need for DNS
Understanding the levels of the internet
DNS: Domain Name System
Implement Web Application Proxy (WAP)
Traditional Internet Applications – / DNS
TCP/IP Protocol Suite: Part 2, Application Layer
COMPUTER NETWORKS PRESENTATION
Read this to find out how the internet works!
Information Retrieval and Web Design
Web Servers (IIS and Apache)
Computer Networks Protocols
Q/ Compare between HTTP & HTTPS? HTTP HTTPS
Presentation transcript:

DNS Tunneling

1 What is DNS?

Domain Name System The Domain Name System (DNS) is used to resolve human-readable hostnames into machine-readable IP addresses.

2 How does DNS Works?

How Does DNS Works? When you visit a domain such as ”facebook.com”, your computer follows a series of steps to turn the human-readable web address into a machine-readable IP address.

Request to a local DNS server

From local DNS to a root DNS server

From root DNS to a TLD DNS server

From TLD to Authoritative DNS server

DNS has a POWERFUL Passport!

The Concept of DNS Tunneling 3 The Concept of DNS Tunneling

DNS Tunneling DNS tunneling is the ability to tunnel another protocol through DNS. DNS tunneling can be used for: Command and Control. Data exfiltration. Tunneling any IP traffic.

Tunnel Components A controlled domain or subdomain. A sever where to install DNS tunneling software. A client side component. Data encoded in DNS payload.  Some of the encoding techniques: Base32 Encoding. Base64 Encoding.

Request to a local DNS server The PC encodes the message in a DNS payload.

From local DNS to a root DNS server

From root DNS to a TLD DNS server

From TLD to Authoritative DNS server The authoritative DNS decodes the message and send the actual request to the internet.

From Authoritative DNS server to the Internet

From Authoritative DNS server to the DNS Client The authoritative DNS encodes the message and sends it as DNS reply.

Decodes the Message The PC decodes the message That is inside the DNS reply.

Detecting DNS Tunneling 4 Detecting DNS Tunneling

Frequency of DNS Requests

Existing DNS Tunneling Tools 5 Existing DNS Tunneling Tools

DNS Tunneling Tools SlowDNS. Iodine. OzymanDNS. Heyoka. DNScat (DNScat-B).

An application that tunnels your data over DNS Tunnel. Demo using SlowDNS An application that tunnels your data over DNS Tunnel. Android App on Google Play.

Any Questions?