![]() The Gnome’s web interface is built on NodeJS with the Express web framework. The gnome is running OpenWRT on an ARM architechture. ![]() Responses are sent in the TXT query responses encoded as base64 strings.Īmong other things, the uploads a JPEG file through a DNS TXT responseĪn image of a bedroom with the text “GnomeNET-NorthAmerica” Answers to the questionsĭNS TXT Queries are sent from the gnome to the CnC server to ask for commands. I don’t really know what level of detail you expect from the submssions so I will first just briefly state the answers to the questions and below follow up with some more in-depth explanations of how I arrived at them. Enojy.įirst of all I want to thank you for a nice and educating challenge. ![]() This post contains the write-up I submitted for the 2015 SANS Holiday Hack challenge. SANS Holiday Hack Challange 2015: Writeup
0 Comments
Leave a Reply. |