ENNAENNA

dnscat2

FeaturedBSD-3-Clause

⚖️ Dual Use · Ruby

dnscat2 creates an encrypted command-and-control channel over the DNS protocol. It's designed for situations where all other outbound traffic is blocked but DNS resolution is still permitted - which is almost always. The tool consists of a client that runs on compromised hosts and a server that runs on an authoritative DNS server controlled by the attacker. All communication is encrypted and tunneled through DNS TXT, CNAME, or MX records.

3.9kstars
648forks
97issues
Updated 2y ago
+I use this
View on GitHub

Use Cases

  • C2 communication over DNS when other protocols are blocked
  • Data exfiltration through DNS queries
  • Bypassing firewall restrictions that allow DNS
  • Encrypted tunneling through corporate DNS infrastructure

Tags

dns-tunnelc2exfiltrationencryptedfirewall-bypass

Details

Category
⚖️ Dual Use
Language
Ruby
Repository
iagox86/dnscat2
License
BSD-3-Clause
Platforms
🐧linux🍎macos🪟windows

Links

GitHub Repository

github.com/iagox86/dnscat2

Releases

github.com/iagox86/dnscat2/releases

Issues

github.com/iagox86/dnscat2/issues

Sponsored

Your ad here

Reach security professionals and developers - ads@en-na.com

Community Reviews

Alternatives & Comparisons

Ligolo-ng

Go

Advanced tunneling/pivoting tool. Creates a TUN interface for transparent proxying through compromised hosts.

Compare dnscat2 vs Ligolo-ng

Chisel

Go

Fast TCP/UDP tunnel over HTTP secured via SSH. Single binary, works behind firewalls and NAT.

Compare dnscat2 vs Chisel

More in Dual Use

ProxyChains-ng

C

Force any TCP connection through SOCKS4/5 or HTTP proxies. Chain multiple proxies for anonymity.

proxysockspivoting

Socat

C

Multipurpose relay tool. Bidirectional data transfer between two data channels - sockets, files, pipes, devices.

relaysockettunneling

ngrok

Go

Expose local servers to the internet via secure tunnels. Instant public URLs for localhost services.

tunnelingreverse-proxynat-bypass

Rclone

Go

rsync for cloud storage. Sync, copy, and mount 70+ cloud providers. Command-line Swiss army knife for cloud data.

cloud-storagesyncexfiltration

GTFOBins

Shell

Curated list of Unix binaries that can be used to bypass security restrictions. Living off the land, documented.

lolbinsprivescshell-escape

LOLBAS

Shell

Living Off The Land Binaries, Scripts and Libraries for Windows. Documenting every Windows binary with offensive potential.

lolbinswindowsevasion