.metadata

execution_time: 2022-05-08 11:19:36.915705

variables: {"record_type": "TXT", "compression": "-c", "passphrase": "0xDEADBEEF"}

scenario: {"name": "DNS Tunnel over DoH Scenario", "description": "\"This Scenario runs DNS Tunnels over DoH\"\n", "provisioner": "vagrant", "use_default_templates": true, "components": [{"name": "dnsoverhttps", "ipv4_address": "192.168.0.10", "description": "Installation of DNS-over-HTTPS server.", "image": "ubuntu/focal64", "setup": {"type": "script", "val": "dns-over-https.bash"}, "run": {"type": "shell", "val": "sudo systemctl stop systemd-resolved; sudo systemctl restart doh-server.service; sudo systemctl restart nginx.service; "}, "artifacts_to_collect": [{"type": "pcap", "val": ["tcpdump -i any -s 0 -n -w /tmp/dns.pcap port 53 or port 443 or port 8053"]}, {"type": "files", "val": ["/var/log/nginx/dns.access.log", "/var/log/doh-server.log", "/tmp/filebeat.json*", "/tmp/dns.pcap"]}, {"type": "filebeat", "val": ["/var/log/nginx/dns.access.log", "/var/log/doh-server.log"]}]}, {"name": "dns2tcp_server", "ipv4_address": "192.168.0.20", "description": "This sets up the DNS2TCP server.", "image": "ubuntu/focal64", "setup": {"type": "ansible", "val": "dns2tcp_server_setup"}, "run": {"type": "shell", "val": "nohup asciinema rec /tmp/dns2tcp_server_TXT.cast -c \\'set -x; dns2tcpd -d 1 -f /opt/dns2tcpdrc & sleep 1\\'"}, "artifacts_to_collect": [{"type": "files", "val": ["/tmp/*.cast"]}]}, {"name": "dns2tcp_client", "ipv4_address": "192.168.0.30", "description": "This sets up the DNS2TCP client.", "image": "ubuntu/focal64", "setup": {"type": "script", "val": "dns2tcp_client_setup.bash"}, "run": {"type": "shell", "val": "echo \"Executing manual C2 here with param: \" TXT  -c"}, "artifacts_to_collect": [{"type": "files", "val": ["/tmp/*.cast"]}], "depends_on": ["dns_attack_server", "dns_server"]}]}