dns-exfiltration

Keylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes through firewalls.

The request.bin of DNS request

Drive-by data exfiltration using open WiFi networks & DNS requests

Open a DNS server that knows no records but records every request. Used for DNS exfiltration.

High-performance/Low-Latency FPGA-based DNS attack detector and threat mitigator

SQLMap wrapper that lets you use Interact.sh as a DNS server for exfiltrating data with zero configuration

Data exfiltration using DNS

🔭 Warping your own Internet everywhere you go 📡

client & server that can be used to transfer data from a client to a DNS server using DNS only.

Dns Exfiltrator script, and evil Dns server side script

StealthNewSQL : The Ultimate NewSQL Injection Tool - Your All-in-One Solution for NewSQL Database Security! 🛡️ Uncover, exploit, and secure NewSQL database vulnerabilities with this feature-packed command-line tool. Whether you're a penetration tester, security researcher, or developer, StealthNewSQL equips you with the ultimate power! 💥

Notes and custom scripts for DNS exfiltration

DNS-Ear listens to incoming DNS queries.

A DNS server used to receive files via DNS exfiltration

A covert reverse shell which uses DNS to tunnel its connections

Dynamic Time Warping for DNS Tunneling and Data Exfiltration

This repository documents a controlled research experiment that demonstrates how DNS lookups triggered by rendered content can be used to exfiltrate data. The technique leverages the browser's automatic DNS resolution behavior when rendering hostnames, without requiring HTTP requests or file upload

PCAP signature analyzer for network traffic analysis and educational purposes

EARWIG is an Advanced DNS Exfiltration Research Tool designed for cybersecurity professionals to analyze covert DNS communication channels, study data transfer techniques, and improve network defense strategies. Built for ethical security research, penetration testing labs, and defensive analysis of DNS-based threats in controlled environments.

OOB operations framework for HTTP/DNS callbacks — correlation tokens tell you which injection point fired. DNS exfiltration decoding, payload hosting and byte-exact responses.