m57/dnsteal

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1730 stars · 232 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

dnsteal is a fake DNS server written in Python that enables stealthy exfiltration of files from a victim machine via DNS requests. It supports multiple file transfers, gzip compression, and customizable subdomain encoding parameters.

Use cases

• exfiltrate files from a compromised machine over DNS
• test data loss prevention (DLP) and egress filtering controls
• demonstrate DNS tunneling in security assessments
• simulate covert channel attacks in red team exercises
• transfer files out of networks that only allow DNS traffic

When to choose

• you need to demonstrate or test DNS-based data exfiltration during a penetration test
• you want a lightweight, single-file Python tool with no dependencies
• you need to validate whether a network's security controls detect DNS tunneling

When to avoid

• you need a general-purpose DNS server or DNS tunneling client for legitimate remote access
• you require high-throughput or reliable file transfer over a controlled network
• you need a maintained tool with active development and modern features

Facets

cli-tool · maturity maintenance

networking security cli security penetration-testing networking python windows cross-platform dns-exfiltration data-exfiltration fake-dns-server red-team penetration-testing-tools command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="m57/dnsteal")