In this video I obtain an interactive reverse shell on a test machine through a DNS tunnel. A custom C2 DNS server handles the agent’s queries and returns commands without being authoritative for the requested domain. This approach allows the use of arbitrary domain names, including legitimate-looking or even non-existent ones, helping the activity blend in with normal DNS traffic or mislead analysis. From a security perspective, this shifts the IOC from the queried domain to the DNS server.

In this video I obtain an interactive reverse shell on a victim machine with no Internet access using an Android smartphone as a Wi-Fi Rogue Access Point connected to the Internet, an ESP8266 (Wi-Fi) USB device that appears as a virtual COM Port and forwards serial traffic through the Access Point and an ATtiny85 virtual keyboard that injects the bootstrap payload to enumerate COM ports, detect the ESP8266, and execute the reverse shell over that port