🛰️ DNS Tunneling Messenger

Smuggle messages inside DNS queries.

"He isn't browsing. He's talking."

What is it?

DNS is the one protocol that is always allowed out. Firewalls may block everything else, but something has to resolve names — and that something can carry cargo. DNS Tunneling Messenger encodes a message in base32, slices it into DNS-label-sized chunks, and ships it as subdomains of a zone you control. A listener parses the query names on the other end and reassembles the message.

The protocol itself is boring, standard DNS. The payload is in the names.

Features

• ✉️ Encode any text into a valid dotted DNS name
• 📡 Ship it as a real UDP DNS query (send)
• 👂 Decode it live from the wire (listen)
• 🧩 Handles long messages (automatic 63-char label slicing)
• 📦 Zero dependencies — pure Python standard library

Install

pip install dns-tunnel-messenger

From source:

git clone https://github.com/AnonymoDGH/dns-tunnel-messenger
cd dns-tunnel-messenger
pip install -e .

Quickstart — lab test on loopback

Terminal A (the listener):

dns-tunnel listen --port 5353 --zone t.example.com
# [+] Listening on udp://0.0.0.0:5353 for zone t.example.com

Terminal B (the courier):

dns-tunnel send "meet at dawn, bring the book" \
    --zone t.example.com --server 127.0.0.1 --port 5353

Terminal A prints:

  [*] 127.0.0.1 -> meet at dawn, bring the book

CLI reference

How it works

Tests

pip install pytest
pytest

Includes an end-to-end test that ships a real message over loopback UDP.

License

MIT — a fiction research prop. Point it at zones you control and keep the novel's intrigue on the page, not the network.