Zenity Labs 披露 Claude 沙箱 DNS 数据外泄与双向 shell 研究
AI summary
Zenity Labs 发布研究《It's Always DNS in Claude's Sandbox: From Data Exfiltration to a Bidirectional DNS Shell》，作者为 @_d1voy，展示在 Claude 沙箱中借助 DNS 实现数据外泄，并进一步建立双向 DNS shell。转发者 @p1njc70r 称其为 DNS C2，并称赞该工作。研究的具体攻击路径、受影响版本与成功率未在转发内容中给出。
Full text · Original
So cool, DNS C2
Great work @_d1voy
It's been a while since @_d1voy published his last work, but a lot has been going on behind the scenes.
Today @_d1voy shares his latest research: "It's Always DNS in Claude's Sandbox: From Data Exfiltration to a Bidirectional DNS Shell," live now on Zenity Labs.View the quoted post on X