A simple DNS-based remote command execution (RCE) tool that allows a client to send commands to a server using DNS queries. The tool encrypts the commands, sends them to the server, and then decrypts the server's response. This tool is built with Python and uses DNS for communication between the client and the server. Features Remote Command Execution (RCE): Send commands to the server through DNS queries. AES Encryption: Commands are encrypted before being sent and decrypted upon receiving the response, ensuring secure communication. Simple Setup: Easy to configure and use with a few command-line arguments. About and Help Options: Built-in -help and -about options for user assistance.
- Remote Command Execution (RCE): Send commands to the server through DNS queries.
- AES Encryption: Commands are encrypted before being sent and decrypted upon receiving the response, ensuring secure communication.
- Simple Setup: Easy to configure and use with a few command-line arguments.
- About and Help Options: Built-in -help and -about options for user assistance.
- Python 3.x
- cryptography library (for AES encryption/decryption)
- Before running the tool, you need to install the required dependencies. You can install them using pip:
To deploy this project run
pip install cryptography
Basic Command To send a command to the server, use the following syntax:
python cli.py -ip <server_ip> -port <server_port> -rce "<command>"
- ip (optional): The IP address of the server (default is 192.168.20.147).
- port (optional): The port of the server (default is 53).
- rce (required): The command you want to execute on the server.
- The client sends a DNS query to the server with the command (e.g., ls) encrypted using AES encryption.
- The command is transmitted via a UDP socket.
- After sending the command, the client waits for the server's response, which is decrypted upon receipt.
- The server listens for incoming DNS queries, decrypts the command, executes it, and then sends the result back to the client.
- The response is also encrypted before being sent back to the client.
- Mr.mtwoj@gmail.com
- acyber.ir