GoKawiilDeveloper showcase catalogs unconventional uses of DNS for data, audio, file transfer and tunneling
A roundup documents a wide range of experimental projects that repurpose the Domain Name System beyond simple name resolution, including tools like NUM, DNSFS, DNSKV, CatDNS, iodine and SlowDNS. These projects use DNS records and lookups to stream audio, store key-value data, transfer files, run VPNs, and even power a chatbot, alongside a note that DNS TXT records can also serve as a channel for malware payload delivery.
GoKawiil's interpretation of the reporting above, not reported fact.
The collection illustrates how DNS's universal availability and caching infrastructure make it an attractive, if inefficient, substrate for data transport when conventional ports or protocols are blocked. This dual-use nature means the same techniques enabling creative engineering demos, such as DNS-based VPNs or filesystems, can also be exploited for covert malware communication, which is why security researchers study these methods as defensive case studies.
- DNS has been adapted for purposes far beyond address resolution, including file transfer, key-value storage, and VPN tunneling.
- Tools like iodine and SlowDNS exploit DNS's typically unrestricted network access to bypass firewalls, albeit with low throughput.
- The same DNS data-carrying techniques used for legitimate experimentation can also be abused by malware to exfiltrate or deliver payloads.
Source: dns.museum, 2026-10-16
Published there as: “The DNS Museum”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.