Caught someone exfiltrating data over DNS TXT records today. Creative, I'll give them that.

Wireshark is my IDE.