Character/N-Gram Frequency Analysis
I have built a character frequency analysis tool that can be used to compare n-gram similarities between various data sets. While the primary use for this tool is for the detection of DNS tunnels, it may also be used for tasks such as analyzing password lists for randomness, or detecting what language a series of n-grams is derived from.
The following screenshots depict the tool being used to analyze three different DNS tunneling applications being used to tunnel SCP over DNS.
The harder you work, the luckier you get
