Hacking an organization with one of the most stealthy and dangerous web attacks

DNS exfiltration over HTTP is a stealthy attack that enables you to bypass web application firewalls. Not many security researchers and penetration testers fully understand it. So in this video, we dive deep on what is DNS exfiltration and how it works and how to use it to bypass firewalls and maximize the impact. make sure to subscribe and turn on the notifications bell.
{----- Lab -----}
github.com/leetCipher/bug-bou...
{----- Support -----}
/ leetcipher
{----- social -----}
/ leetcipher
{----- Video chapters -----}
0:00 intro
0:13 lab setup
1:04 lab overview
1:33 fuzzing the vulnerable parameter
3:20 tcp vs udp traffic
4:13 what is dns
4:43 interactsh
5:17 installing interactsh
5:53 how dns servers handle domain queries
6:21 testing our theory
7:00 domain name anatomy
8:05 planning the attack/exfiltration
9:27 implementing the exploit in bash
10:33 running the exploit in burp suite
11:37 implementing the exploit in python
12:29 running the exploit in burp suite
12:57 decoding the payloads using python
13:45 adding even more constraints
14:27 adding a custom base64 encoding to our exploit
15:03 running the exploit in burp suite
15:18 decoding the exfiltrated payloads
16:03 outro
#hacking #bugbounty #penetrationtesting

[@LeetCipher]

while True:
subscribe(channel)
like(video)
share(video, everywhere)

[@seiv-]

Those "small" security channels are the most underrated channels on youtube, and they are my to go place for ACTUAL GOOD CONTENT (and not influencer like content)!
Keep up the great work mate!
Liked + Subbed

[@user-ho9or2mf9k]

what are some others

[@deadbeef2482]

+1, agreed so much

[@sidss007]

Awesome video. Video's like this make me feel that there is so much to learn and I don't know anything 😂

[@WebWonders1]

You know what i have been addicted by your content to see again and again.
Thanks 🙏

[@mizudatsuraku5590]

You're one of my favorite channel when it comes to Security. Thank you very much for giving us a high quality content.

[@Techbeam]

The skills i need to acquire , i smashed subscribe button when I saw your first video . As a beginner it's very hard to grasp this but I'm still getting something out of it 😊 , i understand the effort you taking for this video as a youtuber please don't stop this , keep going ❤❤❤

[@WebWonders1]

Also your previous video of ssrf using dns rebinding techniques result my first bounty of $200 that's why I love your videos 😊

[@martint1775]

This video was great! Please don't stop creating these

[@fahimhussain2704]

Great to see you uploading again!

[@nicollasalcantara6907]

I subscribred in this channel, really good content.

[@dev__004]

Another awesome video as always. Worth the wait . It would be great if you uploaded more frequently!!❤

[@janekmachnicki2593]

First time i see you here and Im so impress .Thanks

[@orestefanovic8961]

Some awesome content you are putting out man!

[@hexormc5164]

Wow i didn’t know u uploaded a new video,you’ve inspired me once again

[@S2eedGH]

what a perfect explanation ! Thanks for great content

[@md.omarsharafi7528]

Your videos are so awesome i usually revise those in every few days. Although I have subscribed and turned on the notification, i visit your channel oftentimes to see if you have uploaded new video. 😂
But why didn’t you tried hex encoding? Isn’t hex encoding best for dns based data exfiltration? What if python or dig was not installed?

[@jissjose1382]

Awesome tutorial out there

[@sajeed433]

Nailed it! Perfect. Could you please start teaching from scratch or share the roadmap you have followed?

[@darccau7204]

Welcome back

[@tayeblagha484]

great Tutorial

[@neiltsakatsa]

Awesome 😎

[@draxler.a]

keep going ❤

[@0RIPPER0]

bro u r genius man !!

[@cair0_]

Nice bro

[@yasharote1602]

GOLD

[@warnawarni5227]

amazing

[@sahilabbasi7184]

Bro how to develop mindsets just like you 😭😭💔 pls reply me 😭 i have 5 year experience still I am not able to find bugs 😞

[@berthold9582]

Blind os command
Si c'est moi je ne serai pas aller si loin chapeau hacker

[@aswins7781]

Love you bro, you're fcuking genius

[@seiv-]

Small question: why did you apply b64 and then on top of that you applied b58, and not applied b58 which has no special chars directly from the beginning?

[@LeetCipher]

That's actually a good question. Unix-based distributions do not have the base58 binary installed by default, which means there's a high chance our attack won't work, and it was also for demonstration purposes, that's why at the end of the video, we showcased the same attack with only base64 implemented from scratch, and then we converted the special chars to ascii representation.

[@ByteBandit-777]

Can you make a video like how did you become a penetration tester able to find real bugs in bug bountys please ?

[@DZbugbountyhunter]

perfect

[@janekmachnicki2593]

I have a problem.When i send domain;echo code thru burp it does not save it in /tmp directory .How come is like that .Any clue ?

[@warnawarni5227]

is it possible to do this trick on any Blind SSRF with HTTP ping back?

[@m7mad540]

❤‍🔥❤‍🔥❤‍🔥❤‍🔥❤‍🔥

[@manishbasnet5230]

Omg 😮

[@cybersec9345]

Cool, do you have a course on udemy?

[@ca7986]

Man you are fuckin genius!

[@DONTLAUGH]

😲

[@JuanBotes]

\o/

[@artieschmidt3039]

the error sound transition is very irritating sorry

[@flashbrutal]

i saw the same kind of ctf challenges on VishwaCTF2023.. in a web Challege . it was checking if domain was active or not. eventually came out with blind rce

[@LeetCipher]

nice

[@manan5]

hey man you are an awesomee teacher! do you have a twitter account or something?

[@drsaqi649]

do u have discord?