Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

dns2tcp

TCP-over-DNS tunnel server and client

protocol-tunnelingRed Team
Official docs ↗Source repo ↗

Platforms: Linux · Last verified September 6, 2026

dns2tcp is a set of tools to encapsulate a TCP session in DNS packets. This type of encapsulation generates smaller packets than IP-over-DNS, improving throughput. The client does not need root privileges.1

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Install on Kali Linux with `sudo apt install dns2tcp`. See the official Kali tool page linked above for full usage and configuration details.

Commonly preinstalled on

Kali Linux

Debian-based distribution built for penetration testing and security auditing