This is a piece of software that lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries are allowed.
It
... [More] runs on Linux, Mac OS X, FreeBSD, NetBSD and OpenBSD and needs a TUN/TAP device. The bandwidth is assymetrical with limited upstream and up to 1 Mbit/s downstream. [Less]
Openswan is an Open Source implementation of IPsec for the Linux operating system. Is it a code fork of the FreeS/WAN project, started by a few of the developers who were growing frustrated with the politics surrounding the FreeS/WAN project.
strongSwan is an OpenSource IPsec implementation for the Linux operating system. It is based on the discontinued FreeS/WAN project and the X.509 patch which we developed over the last three years. It
... [More] features IKEv1 and IKEv2 keying capabilities and targets Linux 2.6 native IPsec. [Less]
udpproxy allows to proxy UDP flows using Netfilter queuing capabilities. This is not just an UDP relay: the destination does not need to be known in advance. First, flows to be proxied need to be
... [More] selected with the help of iptables:
# iptables -A OUTPUT -p udp --dport 161 \
--destination 172.16.100.0/23 -j NFQUEUE --queue-num 10
Then, udpproxy is launched and will relay the packets sent to queue 10:
# udpproxy -e "ssh somehost ./udpproxy" -q 10 [Less]
Tunnels TCP over UDP packets. Runs in user space on Linux, Solaris, Cygwin (with IPv6 extension), and native Win32. Currently there isn't any authentication or encryption, but I plan to add that in
... [More] one day.
The revisions in the svn repository will be working versions. Add any issues to you may encounter to the Issues tab. [Less]
dnstun provides a client and server for tunneling UDP traffic over DNS - perfectly suited to tunneling openvpn or similar traffic over DNS queries.
The client has two threads - one receives UDP
... [More] packets on a socket and encapsulates them in DNS queries, while the other polls the DNS server for data and sends the data as UDP packets to the client accessing its socket.
The server also has two threads - one receives UDP packets on a socket and adds them to a queue, and the other receives DNS requests from the client and sends the data as UDP packets to a destination server, and receives polls from the client and responds with data from the queue.
Currently it is mostly complete but ENTIRELY UNTESTED. [Less]
This is a proof-of-concept implementation of Dan Kaminsky's so-called "DNS source routing" hack.
WHAT IT DOES: establish inbound IP traffic to a host inside a private network, with no public IP
... [More] address nor DNAT setup.
HOW IT WORKS: the private network's local dns resolver is fooled into relaying trafic back in forth.
REQUIREMENTS:
- The target network must host a local dns resolver
- The dns resolver must be able to establish UDP/53 connections towards the target
- The attacker must have authority on a zone somewhere in the DNS hierarchy
- The attacker must trigger an initial DNS request for the zone he controls from inside the target network (there are many ways to do so)
More in-depth documentation will be included, as the available documentation is scarse to say the least. [Less]