Low & Slow - Techniques for DNS Data Exfiltration

Explore advanced techniques for DNS data exfiltration in this 27-minute conference talk from BSidesLV 2019. Delve into the world of covert data transmission as Dimitri Fousekis presents "Low & Slow" methods for extracting sensitive information through DNS tunnels. Learn about the systems involved, how to abuse trusted services like Exim Synmail, and witness a live demonstration of DNS tools and lookups. Gain valuable insights into this stealthy approach to data exfiltration and understand its implications for network security.

Intro
Agenda
What we are covering
Danis tunnels
What systems know
Abuse trusted services
Exim Synmail
Demonstration
DNS Tool
DNS Lookups