# Data Exfiltration

> Exfiltrate data via DNS queries using dnscat2, iodine, and manual methods

- **URL:** https://hackindex.io/services/dns/data-exfiltration
- **Service:** [DNS](https://hackindex.io/services/dns.md)
- **Tags:** exfiltration, extraction, impact
- **Published:** 2026-03-16
- **Updated:** 2026-03-29

DNS data exfiltration uses DNS queries to extract data from environments where direct outbound connections are blocked. Since DNS traffic is rarely filtered, it provides a reliable out-of-band channel.

DNS tunneling encodes data into subdomain labels of a query, sending it to an attacker-controlled authoritative nameserver. Tools like dnscat2 and iodine build full tunnels over DNS. Simpler approaches encode small payloads (credentials, command output) into TXT or A record lookups, using a Burp Collaborator or custom listener to capture the data.

## Guides

- [DNS Data Exfiltration](https://hackindex.io/services/dns/data-exfiltration/dns-data-exfiltration.md)