DNS tunneling

The threat

DNS is often allowed and lightly inspected. Attackers can encode data into many small DNS lookups.

How the test works

Choose a small dummy file. The browser encodes it into DNS-style requests and the server attempts reconstruction.

Try it yourself

Use a dummy file under 100 KB. Reconstructed files are auto-deleted after 10 minutes.

✓
Test pass condition

The DNS requests are blocked, or the file cannot be reconstructed.

✗
Test fail condition

The file is reconstructed from DNS-style requests.

Use SWG Audit only in authorized environments with dummy data. By continuing, you agree to our Terms of Use and Privacy Policy.