Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• UpdatedJul 10, 2024
• Go

Surreptitiously exfiltrate data from the browser over DNS

• UpdatedJul 19, 2020
• Go

Keylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes through firewalls.

• UpdatedJun 16, 2024
• Python

Database Driven DNS Server with a Web UI

• UpdatedFeb 1, 2024
• Python

ICMP and DNS tunneling via IPv4 and IPv6

• UpdatedApr 4, 2025
• C++

Android VPN over DNS (no root required). Repo moved to gitlab

• UpdatedJun 14, 2018
• C

Sending messages by hacking the DNS protocol. See website for demo server usage instructions

• UpdatedDec 6, 2022
• Python

Tunnel TCP or UDP traffic over TCP, (mutual) TLS or DNS (authoritative server or direct connection), implemented in Rust

• UpdatedNov 9, 2021
• Rust

Deep Learning for Domain Name System

• UpdatedJan 14, 2022
• Python

Coyote is a standalone C# post-exploitation implant for maintaining access to compromised Windows infrastructure during red team engagements using DNS tunneling.

• UpdatedMay 15, 2022
• C#

Here is an example which shows an idea how DNS tunneling can be implemented in Java.

• UpdatedOct 18, 2021
• Java

Deep Learning Based DNS Tunneling Detection and Blocking System. Published with the same title. Publication code : aece 3/2021 - 5

• UpdatedFeb 11, 2025
• Python

proof of concept for a DNS tunneling client and server, for security education

• UpdatedJul 16, 2021
• C

Describes an architecture for DNS Tunneling detection at AWS cloud using ELK.

• UpdatedJun 21, 2023

Detection of malware bot and botnet activities over DNS / Master's Thesis

• UpdatedFeb 22, 2024
• Jupyter Notebook

DNS Tunnel

• UpdatedDec 20, 2018
• Perl

"TunnelKeys" is a Python keylogger script. It transmits the keys pressed via DNS tunneling using Base32 encoding. *Educational Purposes*

• UpdatedJan 14, 2025
• Python

DNS Incident Response

• UpdatedAug 30, 2023

A naive implementation of sharing a file over the DNS

• UpdatedJul 24, 2024
• Python

Dynamic Time Warping for DNS Tunneling and Data Exfiltration

• UpdatedNov 25, 2024
• Python