https://github.com/mk-fg/dns2udp
Python/twisted script to proxy UDP traffic over DNS (TXT) queries
https://github.com/mk-fg/dns2udp
dns obfuscation proxy python tunnel twisted udp
Last synced: 9 months ago
JSON representation
Python/twisted script to proxy UDP traffic over DNS (TXT) queries
- Host: GitHub
- URL: https://github.com/mk-fg/dns2udp
- Owner: mk-fg
- License: wtfpl
- Created: 2013-10-21T12:28:50.000Z (about 12 years ago)
- Default Branch: master
- Last Pushed: 2013-10-21T12:56:38.000Z (about 12 years ago)
- Last Synced: 2025-04-14T02:37:32.768Z (9 months ago)
- Topics: dns, obfuscation, proxy, python, tunnel, twisted, udp
- Language: Python
- Size: 105 KB
- Stars: 4
- Watchers: 2
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: COPYING
Awesome Lists containing this project
README
dns2udp
--------------------
Python/twisted script to proxy UDP traffic over DNS (TXT) queries.
Example usage:
```console
# Start *listening* netcat on UDP-1234
m1% ncat -luv 127.0.0.1 1234
Ncat: Version 6.25 ( http://nmap.org/ncat )
Ncat: Listening on 127.0.0.1:1234
(whatever typed here should be seen in last netcat)
# DNS (on default port 5353, see --help) to proxy packets to that netcat
m1% ./dns2udp.py --debug dns-server 127.0.0.1:1234
# (on a presumably remote machine) Proxy from 127.0.0.1:1235 to that DNS
m2% ./dns2udp.py --debug dns-client 127.0.0.1:1235 127.0.0.1:5353
# (on a presumably remote machine) Netcat to connect to first over DNS
m2% ncat -uv 127.0.0.1 1235
Ncat: Version 6.25 ( http://nmap.org/ncat )
Ncat: Connected to 127.0.0.1:1235.
(whatever typed here should be seen in first netcat)
```
Needs Python 2.7 and [Twisted](http://twistedmatrix.com/).
More a proof of concept than a real thing, for which some extra things might be
useful:
- Smarter name encoding.
- Length restriction on names and replies, splitting and re-assembling of
packets on both sides.
- Polling (quite frequent) to get packets buffered on dns side.
- Working with some fixed or maybe endpoint-dependent
(e.g. ".my.proxy.domain.tld" for packets to/from "addr/port")
domain name suffix.
- Probably not that great for lots of traffic anyway.