After I wrote that blog post, I also added the ability to tunnel traffic through Beacon when its checking in several times each second. Recently, I added the ab

After I wrote that blog post, I also added the ability to tunnel traffic through Beacon when its checking in several times each second. Recently, I added the ability for it to download a large file, a piece at a time, with each checkin. The size of the piece depends on the data channel (DNS vs. HTTP). It's all encrypted too. - http://blog.strategiccyber.com/2013/06/20/thatll-never-work-we-dont-allow-port-53-out/ http://blog.strategiccyber.com/2013/06/20/thatll-never-work-... - http://blog.strategiccyber.com/2013/07/09/hacking-through-a-straw-pivoting-over-dns/ http://blog.strategiccyber.com/2013/07/09/hacking-through-a-... Cobalt Strike is a commercial tool, so it better include the bells and whistles. The OP does a good job of showing code that anyone can play with, right now. Dan Kaminsky's BlackHat presentations on OzymanDNS are excellent as well.