facebookarchive/weasel

DNS covert channel implant for Red Teams.

weasel's Issues

Cannot initiate client/server communications

Hello

I have been trying for a few days to get this project working and I cannot get the client to perform a lookup and find the server. I constantly receive:
[socket.gaierror: [Errno -2] Name or service not known]

I am going to assume this error is on me and would like a bit of guidance. I am using 2 digital ocean droplets both running Ubuntu 18.04.3. Namecheap is my registrar and I use intoDNS.com to receive my SOA information. I have tried variations of your example but cannot get the client to resolve.

Could you expand more on your setup that made this work? Am I going about this incorrectly?

Please include Snort and Yara rules to support detection.

In order to help defenders, please include Snort and/or Yara rules to help detect the usage of this tool.

Confusing/innacurate statement in the README on CSPRNG

The README says:

We use os.urandom() for IV generation instead of a CSPRNG.

os.urandom() is an interface to the kernel's CSPRNG, so I don't know what this means.