{"id":476947,"date":"2023-08-09T09:05:36","date_gmt":"2023-08-09T09:05:36","guid":{"rendered":""},"modified":"2023-09-05T11:13:44","modified_gmt":"2023-09-05T11:13:44","slug":"dns-tunneling","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/dns-tunneling\/","title":{"rendered":"DNS \u96a7\u9053"},"content":{"rendered":"<p>DNS \u96a7\u9053\u662f\u4e00\u79cd\u5229\u7528\u57df\u540d\u7cfb\u7edf (DNS) \u534f\u8bae\u5c01\u88c5\u5176\u4ed6\u7f51\u7edc\u534f\u8bae\uff08\u5305\u62ec TCP \u548c HTTP\uff09\u7684\u6280\u672f\u3002\u5b83\u901a\u5e38\u88ab\u7528\u4f5c\u7ed5\u8fc7\u7f51\u7edc\u5b89\u5168\u63aa\u65bd\uff08\u4f8b\u5982\u9632\u706b\u5899\uff09\u4ee5\u5efa\u7acb\u9690\u853d\u901a\u4fe1\u901a\u9053\u7684\u65b9\u6cd5\u3002<\/p>\n<h2>DNS \u96a7\u9053\u7684\u5386\u53f2\u6f14\u53d8<\/h2>\n<p>DNS \u96a7\u9053\u6700\u65e9\u7684\u5b9e\u4f8b\u53ef\u4ee5\u8ffd\u6eaf\u5230 20 \u4e16\u7eaa 90 \u5e74\u4ee3\u672b\u548c 2000 \u5e74\u4ee3\u521d\uff0c\u5f53\u65f6\u4e92\u8054\u7f51\u7528\u6237\u5bfb\u6c42\u89c4\u907f\u8bbf\u95ee\u9650\u5236\u6216\u533f\u540d\u5176\u7f51\u7edc\u6d3b\u52a8\u7684\u65b9\u6cd5\u3002\u5229\u7528 DNS \u534f\u8bae\u5c01\u88c5\u5176\u4ed6\u534f\u8bae\u7684\u65b9\u6cd5\u7531\u4e8e\u5176\u6709\u6548\u6027\u4ee5\u53ca DNS \u534f\u8bae\u672c\u8eab\u7684\u76f8\u5bf9\u666e\u904d\u6027\u800c\u53d8\u5f97\u8d8a\u6765\u8d8a\u6d41\u884c\u3002<\/p>\n<p>\u968f\u7740 DNScat\uff08\u7531 Ron Bowes \u4e8e 2004 \u5e74\u5f00\u53d1\uff09\u7684\u51fa\u73b0\uff0c\u8be5\u6280\u672f\u7684\u4f7f\u7528\u91cf\u663e\u7740\u589e\u52a0\u3002\u8fd9\u6807\u5fd7\u7740 DNS \u96a7\u9053\u7684\u9996\u6279\u5b9e\u9645\u5b9e\u73b0\u4e4b\u4e00\uff0c\u4f7f\u5176\u6210\u4e3a\u89c4\u907f\u7f51\u7edc\u9650\u5236\u7684\u53ef\u884c\u65b9\u6cd5\u800c\u83b7\u5f97\u8ba4\u53ef\u3002<\/p>\n<h2>\u6df1\u5165\u7814\u7a76 DNS \u96a7\u9053<\/h2>\n<p>DNS \u96a7\u9053\u662f\u6307\u5c06\u975e DNS \u6570\u636e\u5d4c\u5165\u5230 DNS \u67e5\u8be2\u548c\u54cd\u5e94\u4e2d\u7684\u884c\u4e3a\u3002\u7531\u4e8e\u5927\u591a\u6570\u9632\u706b\u5899\u901a\u5e38\u5141\u8bb8 DNS \u8bf7\u6c42\uff0c\u56e0\u6b64\u8fd9\u63d0\u4f9b\u4e86\u4e00\u4e2a\u8c28\u614e\u7684\u6570\u636e\u4ea4\u6362\u901a\u9053\uff0c\u53ef\u4ee5\u5728\u4e0d\u88ab\u6ce8\u610f\u7684\u60c5\u51b5\u4e0b\u7ed5\u8fc7\u5927\u591a\u6570\u7f51\u7edc\u5b89\u5168\u7cfb\u7edf\u3002<\/p>\n<p>\u8be5\u8fc7\u7a0b\u6d89\u53ca\u5ba2\u6237\u7aef\u5411\u670d\u52a1\u5668\u53d1\u9001\u5305\u542b\u7f16\u7801\u6570\u636e\u7684 DNS \u8bf7\u6c42\u3002\u8be5\u670d\u52a1\u5668\u4f9d\u6b21\u5bf9\u8bf7\u6c42\u8fdb\u884c\u89e3\u7801\u5e76\u5904\u7406\u5d4c\u5165\u7684\u6570\u636e\uff0c\u7136\u540e\u5411\u5ba2\u6237\u7aef\u53d1\u9001\u5305\u542b\u4efb\u4f55\u5fc5\u8981\u8fd4\u56de\u6570\u636e\u7684\u54cd\u5e94\uff0c\u8fd9\u4e9b\u6570\u636e\u4e5f\u7f16\u7801\u5728 DNS \u54cd\u5e94\u4e2d\u3002<\/p>\n<h2>DNS \u96a7\u9053\u7684\u5185\u90e8\u5de5\u4f5c\u539f\u7406<\/h2>\n<p>DNS\u96a7\u9053\u7684\u8fc7\u7a0b\u76f8\u5bf9\u7b80\u5355\uff0c\u53ef\u4ee5\u5206\u4e3a\u4ee5\u4e0b\u6b65\u9aa4\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u5ba2\u6237\u7aef-\u670d\u52a1\u5668\u901a\u4fe1<\/strong>\uff1a\u5ba2\u6237\u7aef\u53d1\u8d77\u4e0e\u5df2\u8bbe\u7f6e\u4ee5\u4fc3\u8fdb DNS \u96a7\u9053\u7684 DNS \u670d\u52a1\u5668\u7684\u901a\u4fe1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6570\u636e\u7f16\u7801<\/strong>\uff1a\u5ba2\u6237\u7aef\u5c06\u5176\u5e0c\u671b\u53d1\u9001\u7684\u6570\u636e\u5d4c\u5165\u5230 DNS \u67e5\u8be2\u4e2d\u3002\u8be5\u6570\u636e\u901a\u5e38\u88ab\u7f16\u7801\u5230 DNS \u8bf7\u6c42\u7684\u5b50\u57df\u90e8\u5206\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6570\u636e\u4f20\u8f93<\/strong>\uff1a\u7136\u540e\uff0c\u5e26\u6709\u5d4c\u5165\u6570\u636e\u7684 DNS \u67e5\u8be2\u901a\u8fc7\u7f51\u7edc\u53d1\u9001\u5230 DNS \u670d\u52a1\u5668\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6570\u636e\u89e3\u7801<\/strong>\uff1aDNS\u670d\u52a1\u5668\u6536\u5230\u8bf7\u6c42\u540e\uff0c\u63d0\u53d6\u5e76\u89e3\u7801\u5d4c\u5165\u7684\u6570\u636e\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u54cd\u5e94\u7f16\u7801<\/strong>\uff1a\u5982\u679c\u9700\u8981\u54cd\u5e94\uff0c\u670d\u52a1\u5668\u4f1a\u5c06\u8fd4\u56de\u6570\u636e\u5d4c\u5165\u5230 DNS \u54cd\u5e94\u4e2d\uff0c\u7136\u540e\u5c06\u5176\u53d1\u9001\u56de\u5ba2\u6237\u7aef\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u54cd\u5e94\u89e3\u7801<\/strong>\uff1a\u5ba2\u6237\u7aef\u63a5\u6536DNS\u54cd\u5e94\uff0c\u89e3\u7801\u5d4c\u5165\u7684\u6570\u636e\uff0c\u5e76\u8fdb\u884c\u76f8\u5e94\u7684\u5904\u7406\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>DNS \u96a7\u9053\u7684\u4e3b\u8981\u7279\u6027<\/h2>\n<p>\u4f7f DNS \u96a7\u9053\u6210\u4e3a\u53ef\u884c\u6280\u672f\u7684\u4e00\u4e9b\u5173\u952e\u529f\u80fd\u5305\u62ec\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u9690\u8eab<\/strong>\uff1aDNS \u96a7\u9053\u53ef\u4ee5\u7ed5\u8fc7\u8bb8\u591a\u9632\u706b\u5899\u548c\u7f51\u7edc\u5b89\u5168\u7cfb\u7edf\u800c\u4e0d\u88ab\u53d1\u73b0\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u529f\u80fd\u6027<\/strong>\uff1aDNS \u96a7\u9053\u53ef\u4ee5\u5c01\u88c5\u591a\u79cd\u7f51\u7edc\u534f\u8bae\uff0c\u4f7f\u5176\u6210\u4e3a\u4e00\u79cd\u901a\u7528\u7684\u6570\u636e\u4f20\u8f93\u65b9\u6cd5\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u65e0\u5904\u4e0d\u5728<\/strong>\uff1aDNS\u534f\u8bae\u5728\u4e92\u8054\u7f51\u4e0a\u51e0\u4e4e\u666e\u904d\u4f7f\u7528\uff0c\u4f7f\u5f97DNS\u96a7\u9053\u9002\u7528\u4e8e\u5e7f\u6cdb\u7684\u573a\u666f\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4e0d\u540c\u7c7b\u578b\u7684 DNS \u96a7\u9053<\/h2>\n<p>DNS \u96a7\u9053\u4e3b\u8981\u6709\u4e24\u79cd\u7c7b\u578b\uff0c\u6309\u6570\u636e\u4f20\u8f93\u6a21\u5f0f\u8fdb\u884c\u533a\u5206\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u76f4\u63a5 DNS \u96a7\u9053<\/strong>\uff1a\u8fd9\u662f\u5ba2\u6237\u7aef\u901a\u8fc7 DNS \u8bf7\u6c42\u548c\u54cd\u5e94\u76f4\u63a5\u4e0e\u670d\u52a1\u5668\u901a\u4fe1\u7684\u60c5\u51b5\u3002\u5f53\u5ba2\u6237\u7aef\u80fd\u591f\u5411\u4e92\u8054\u7f51\u4e0a\u7684\u4efb\u4f55\u670d\u52a1\u5668\u53d1\u51fa\u4efb\u610f DNS \u8bf7\u6c42\u65f6\uff0c\u901a\u5e38\u4f1a\u4f7f\u7528\u5b83\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u901a\u8baf\u65b9\u5f0f<\/th>\n<th>\u76f4\u63a5 DNS \u96a7\u9053<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u6c9f\u901a<\/td>\n<td>\u76f4\u63a5\u7684<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/li>\n<li>\n<p><strong>\u9012\u5f52 DNS \u96a7\u9053<\/strong>\uff1a\u5f53\u5ba2\u6237\u7aef\u53ea\u80fd\u5411\u7279\u5b9a DNS \u670d\u52a1\u5668\uff08\u4f8b\u5982\u7f51\u7edc\u7684\u672c\u5730 DNS \u670d\u52a1\u5668\uff09\u53d1\u51fa DNS \u8bf7\u6c42\uff0c\u7136\u540e\u8be5\u670d\u52a1\u5668\u4ee3\u8868\u5ba2\u6237\u7aef\u53d1\u51fa\u8fdb\u4e00\u6b65\u8bf7\u6c42\u65f6\u4f7f\u7528\u6b64\u9009\u9879\u3002\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u96a7\u9053\u670d\u52a1\u5668\u901a\u5e38\u662f\u4e92\u8054\u7f51\u4e0a\u7684\u516c\u5171 DNS \u670d\u52a1\u5668\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u901a\u8baf\u65b9\u5f0f<\/th>\n<th>\u9012\u5f52 DNS \u96a7\u9053<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u6c9f\u901a<\/td>\n<td>\u95f4\u63a5\uff08\u9012\u5f52\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/li>\n<\/ol>\n<h2>DNS \u96a7\u9053\u7684\u5b9e\u9645\u5e94\u7528\u3001\u95ee\u9898\u548c\u89e3\u51b3\u65b9\u6848<\/h2>\n<p>DNS \u96a7\u9053\u53ef\u4ee5\u4ee5\u591a\u79cd\u65b9\u5f0f\u4f7f\u7528\uff0c\u5305\u62ec\u826f\u6027\u7684\u548c\u6076\u610f\u7684\u3002\u5b83\u6709\u65f6\u7528\u4e8e\u89c4\u907f\u5ba1\u67e5\u6216\u5176\u4ed6\u7f51\u7edc\u9650\u5236\uff0c\u6216\u901a\u8fc7 DNS \u5efa\u7acb\u7c7b\u4f3c VPN \u7684\u670d\u52a1\u3002\u7136\u800c\uff0c\u6076\u610f\u884c\u4e3a\u8005\u4e5f\u7ecf\u5e38\u4f7f\u7528\u5b83\u6765\u7a83\u53d6\u6570\u636e\u3001\u5efa\u7acb\u547d\u4ee4\u548c\u63a7\u5236\u901a\u9053\u6216\u4f20\u8f93\u6076\u610f\u6d41\u91cf\u3002<\/p>\n<p>DNS \u96a7\u9053\u7684\u4e00\u4e9b\u5e38\u89c1\u95ee\u9898\u5305\u62ec\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u8868\u73b0<\/strong>\uff1a\u4e0e\u6807\u51c6\u7f51\u7edc\u901a\u4fe1\u76f8\u6bd4\uff0cDNS \u96a7\u9053\u53ef\u80fd\u76f8\u5bf9\u8f83\u6162\uff0c\u56e0\u4e3a DNS \u5e76\u975e\u4e13\u4e3a\u9ad8\u901f\u6570\u636e\u4f20\u8f93\u800c\u8bbe\u8ba1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u68c0\u6d4b<\/strong>\uff1a\u867d\u7136 DNS \u96a7\u9053\u53ef\u4ee5\u7ed5\u8fc7\u8bb8\u591a\u9632\u706b\u5899\uff0c\u4f46\u66f4\u5148\u8fdb\u7684\u5b89\u5168\u7cfb\u7edf\u53ef\u80fd\u80fd\u591f\u68c0\u6d4b\u5e76\u963b\u6b62\u5b83\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u53ef\u9760\u6027<\/strong>\uff1aDNS \u662f\u65e0\u72b6\u6001\u534f\u8bae\uff0c\u672c\u8eab\u5e76\u4e0d\u4fdd\u8bc1\u6570\u636e\u7684\u53ef\u9760\u4f20\u9012\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u8fd9\u4e9b\u95ee\u9898\u901a\u5e38\u53ef\u4ee5\u901a\u8fc7\u4ed4\u7ec6\u914d\u7f6e\u96a7\u9053\u7cfb\u7edf\u3001\u4f7f\u7528\u7ea0\u9519\u7801\u6216\u5c06 DNS \u96a7\u9053\u4e0e\u5176\u4ed6\u6280\u672f\u76f8\u7ed3\u5408\u4ee5\u63d0\u9ad8\u9690\u853d\u6027\u548c\u53ef\u9760\u6027\u6765\u7f13\u89e3\u3002<\/p>\n<h2>DNS \u96a7\u9053\u4e0e\u7c7b\u4f3c\u6280\u672f\u7684\u6bd4\u8f83<\/h2>\n<p>\u4ee5\u4e0b\u662f\u4e00\u4e9b\u7c7b\u4f3c\u7684\u6280\u672f\u4ee5\u53ca\u5b83\u4eec\u4e0e DNS \u96a7\u9053\u7684\u6bd4\u8f83\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6280\u672f<\/th>\n<th>DNS \u96a7\u9053<\/th>\n<th>HTTP \u96a7\u9053<\/th>\n<th>ICMP \u96a7\u9053<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u9690\u8eab<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u7f13\u548c<\/td>\n<td>\u4f4e\u7684<\/td>\n<\/tr>\n<tr>\n<td>\u591a\u529f\u80fd\u6027<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u7f13\u548c<\/td>\n<td>\u4f4e\u7684<\/td>\n<\/tr>\n<tr>\n<td>\u65e0\u5904\u4e0d\u5728<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u7f13\u548c<\/td>\n<\/tr>\n<tr>\n<td>\u901f\u5ea6<\/td>\n<td>\u4f4e\u7684<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u7f13\u548c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u4ece\u8868\u4e2d\u53ef\u4ee5\u770b\u51fa\uff0c\u867d\u7136 DNS \u96a7\u9053\u4e0d\u662f\u6700\u5feb\u7684\uff0c\u4f46\u5b83\u5177\u6709\u8f83\u9ad8\u7684\u9690\u853d\u6027\u548c\u591a\u529f\u80fd\u6027\uff0c\u4f7f\u5176\u6210\u4e3a\u5404\u79cd\u573a\u666f\u7684\u9996\u9009\u6280\u672f\u3002<\/p>\n<h2>DNS \u96a7\u9053\u7684\u672a\u6765\u5c55\u671b<\/h2>\n<p>\u968f\u7740\u7f51\u7edc\u5b89\u5168\u7684\u4e0d\u65ad\u8fdb\u6b65\uff0cDNS \u96a7\u9053\u7b49\u6280\u672f\u4e5f\u5c06\u4e0d\u65ad\u8fdb\u6b65\u3002\u8be5\u9886\u57df\u7684\u672a\u6765\u53d1\u5c55\u53ef\u80fd\u96c6\u4e2d\u4e8e\u8fdb\u4e00\u6b65\u589e\u5f3a DNS \u96a7\u9053\u7684\u9690\u853d\u6027\u548c\u591a\u529f\u80fd\u6027\u3001\u5f00\u53d1\u66f4\u590d\u6742\u7684\u68c0\u6d4b\u65b9\u6cd5\uff0c\u5e76\u63a2\u7d22\u5176\u4e0e\u5176\u4ed6\u4e0d\u65ad\u53d1\u5c55\u7684\u6280\u672f\uff08\u4f8b\u5982\u7528\u4e8e\u5f02\u5e38\u68c0\u6d4b\u7684\u673a\u5668\u5b66\u4e60\uff09\u7684\u96c6\u6210\u3002<\/p>\n<p>\u6b64\u5916\uff0c\u968f\u7740\u57fa\u4e8e\u4e91\u7684\u670d\u52a1\u548c\u7269\u8054\u7f51\u8bbe\u5907\u7684\u5174\u8d77\uff0cDNS \u96a7\u9053\u53ef\u80fd\u4f1a\u51fa\u73b0\u65b0\u7684\u5e94\u7528\uff0c\u65e0\u8bba\u662f\u5728\u63d0\u4f9b\u5b89\u5168\u3001\u9690\u853d\u7684\u901a\u4fe1\u901a\u9053\u65b9\u9762\uff0c\u8fd8\u662f\u4f5c\u4e3a\u6f5c\u5728\u6570\u636e\u6cc4\u9732\u6216\u6076\u610f\u884c\u4e3a\u8005\u7684\u547d\u4ee4\u548c\u63a7\u5236\u901a\u9053\u7684\u65b9\u6cd5\u3002<\/p>\n<h2>\u4ee3\u7406\u670d\u52a1\u5668\u5728 DNS \u96a7\u9053\u4e2d\u7684\u4f5c\u7528<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\uff08\u4f8b\u5982 OneProxy \u63d0\u4f9b\u7684\u4ee3\u7406\u670d\u52a1\u5668\uff09\u53ef\u4ee5\u5728 DNS \u96a7\u9053\u4e2d\u53d1\u6325\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\u3002\u5728\u4f7f\u7528 DNS \u96a7\u9053\u7684\u8bbe\u7f6e\u4e2d\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5145\u5f53\u4e2d\u4ecb\uff0c\u89e3\u7801 DNS \u8bf7\u6c42\u4e2d\u5d4c\u5165\u7684\u6570\u636e\u5e76\u5c06\u5176\u8f6c\u53d1\u5230\u9002\u5f53\u7684\u76ee\u7684\u5730\u3002<\/p>\n<p>\u8fd9\u53ef\u4ee5\u589e\u5f3a DNS \u96a7\u9053\u7684\u9690\u853d\u6027\u548c\u6548\u7387\uff0c\u56e0\u4e3a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5904\u7406\u6570\u636e\u7f16\u7801\u548c\u89e3\u7801\u7684\u4efb\u52a1\uff0c\u4ece\u800c\u4f7f\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u80fd\u591f\u4e13\u6ce8\u4e8e\u5176\u4e3b\u8981\u4efb\u52a1\u3002\u6b64\u5916\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u7684\u4f7f\u7528\u53ef\u4ee5\u4e3a\u6d41\u7a0b\u63d0\u4f9b\u989d\u5916\u7684\u533f\u540d\u6027\u548c\u5b89\u5168\u6027\u3002<\/p>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173 DNS \u96a7\u9053\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ol>\n<li><a href=\"https:\/\/www.cloudflare.com\/learning\/dns\/glossary\/dns-tunneling\/\" target=\"_new\" rel=\"noopener nofollow\">DNS \u96a7\u9053\uff1a\u6076\u610f\u884c\u4e3a\u8005\u5982\u4f55\uff08\u6ee5\u7528\uff09\u4f7f\u7528 DNS<\/a><\/li>\n<li><a href=\"https:\/\/krebsonsecurity.com\/2019\/02\/a-deep-dive-on-the-recent-widespread-dns-hijacking-attacks\/\" target=\"_new\" rel=\"noopener nofollow\">\u6df1\u5165\u63a2\u8ba8\u6700\u8fd1\u5e7f\u6cdb\u4f20\u64ad\u7684 DNS \u52ab\u6301\u653b\u51fb<\/a><\/li>\n<li><a href=\"https:\/\/cybersecurity.att.com\/blogs\/security-essentials\/dns-tunneling-how-it-works\" target=\"_new\" rel=\"noopener nofollow\">DNS \u96a7\u9053\uff1a\u5b83\u662f\u5982\u4f55\u5de5\u4f5c\u7684<\/a><\/li>\n<li><a href=\"https:\/\/www.acunetix.com\/blog\/articles\/dns-tunneling\/\" target=\"_new\" rel=\"noopener nofollow\">\u4ec0\u4e48\u662f DNS \u96a7\u9053<\/a><\/li>\n<li><a href=\"https:\/\/securityintelligence.com\/posts\/the-ongoing-threat-of-dns-tunneling\/\" target=\"_new\" rel=\"noopener nofollow\">DNS \u96a7\u9053\u7684\u6301\u7eed\u5a01\u80c1<\/a><\/li>\n<\/ol>","protected":false},"featured_media":476948,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476947","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>A Comprehensive Look at DNS Tunneling<\/mark>","faq_items":[{"question":"What is DNS Tunneling?","answer":"<p>DNS tunneling is a technique that uses the Domain Name System (DNS) protocol to encapsulate other network protocols such as TCP and HTTP. It is often used to bypass network security measures to establish covert communication channels.<\/p>"},{"question":"When was DNS Tunneling first used?","answer":"<p>DNS tunneling has been used since the late 1990s and early 2000s. It gained more popularity with the advent of DNScat, a tool developed by Ron Bowes in 2004, which provided one of the first practical implementations of DNS tunneling.<\/p>"},{"question":"How does DNS Tunneling work?","answer":"<p>DNS tunneling involves embedding non-DNS data into DNS queries and responses. The client sends a DNS request with encoded data to the server, which then decodes the request, processes the embedded data, and sends a response back to the client with any necessary return data, also encoded within a DNS response.<\/p>"},{"question":"What are the key features of DNS Tunneling?","answer":"<p>Key features of DNS tunneling include its stealthiness, versatility, and ubiquity. DNS tunneling can bypass many firewalls and network security systems undetected. It can encapsulate a wide range of network protocols, and the DNS protocol itself is almost universally used on the internet.<\/p>"},{"question":"What types of DNS Tunneling exist?","answer":"<p>There are two main types of DNS tunneling - Direct DNS Tunneling and Recursive DNS Tunneling. Direct DNS Tunneling is when a client communicates directly with a server via DNS requests and responses, typically used when the client can make arbitrary DNS requests to any server on the internet. Recursive DNS Tunneling is used when the client can only make DNS requests to a specific DNS server, which then makes further requests on behalf of the client.<\/p>"},{"question":"What are some ways to use DNS Tunneling, and what problems might arise from its use?","answer":"<p>DNS tunneling can be used to circumvent censorship or network restrictions, or to establish VPN-like services over DNS. However, it can also be used maliciously to exfiltrate data or establish command and control channels. Common issues with DNS tunneling include performance, as DNS tunneling can be slow compared to standard network communications, detection by advanced security systems, and reliability, since DNS is a stateless protocol.<\/p>"},{"question":"How do Proxy Servers relate to DNS Tunneling?","answer":"<p>Proxy servers, such as those provided by OneProxy, can act as intermediaries in a DNS tunneling setup. They can decode the data embedded in DNS requests and forward it to the appropriate destination, enhancing the stealth and efficiency of DNS tunneling. The use of a proxy server can also provide an additional layer of anonymity and security.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476947","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476947\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/476948"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=476947"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}