ronin-listener-dns - Starts a DNS server for receiving exfiltrated data
ronin-listener dns
[options] DOMAIN
Starts a DNS server for receiving exfiltrated data.
DOMAIN : The domain to receive DNS queries for.
-o
, --output
FILE
: The output file to write the received DNS queries to.
-F
, --output-format
txt
|csv
|json
|ndjson
: The output format to use. If not specified, the output format will be inferred
from the output file's extension. If the output format cannot be inferred from
the output file's extension, then it will default to txt
format.
-H
, --host
IP
: The interface to listen on. Defaults to 0.0.0.0
if not given.
-p
, --port
PORT
: The port to listen on. Defaults to 53
if not given.
-h
, --help
: Prints help information.
Runs a DNS listener on 127.0.0.1:5553
for domain example.com
:
$ ronin-listener dns -H 127.0.0.1 -p 5553 example.com
Run a DNS listener on 0.0.0.0:53
for domain example.com
as root:
$ sudo ronin-listener dns example.com
Postmodern postmodern.mod3@gmail.com