Unverified50% confidenceFactExact time
Nearly all network environments allow DNS query traffic to pass through, making it susceptible to abuse as a channel for data exfiltration or command delivery.
1
Sources
50%
Confidence
Long-term
Relevance
9/27/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDNS tunneling transmits data by encoding it into the domain name portion of DNS queries, which are then resolved and responded to by an authoritative DNS server set up by the controlling party.80% similarUnverifiedDNS queries are almost never blocked by enterprise firewalls, and traditional security devices focus their monitoring on HTTP/HTTPS traffic while giving insufficient scrutiny to DNS traffic.78% similarUnverifiedEven when a sandbox blocks conventional outbound HTTP/HTTPS connections, DNS resolution requests are often still permitted, thereby creating an escape path.76% similarUnverifiedThe network issues faced by domestic developers mainly fall into two categories: DNS poisoning that prevents resolution of domain names such as dl.google.com, and TCP connections being interrupted or throttled.76% similarUnverifiedDNS tunneling is commonly used to bypass the authentication portals of paid Wi-Fi networks, or as a covert communication channel (C2 channel) for malware.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/952997API
curl https://kongchang.com/api/v1/knowledge/claims/952997MCP
get_claim(id=952997)