DNScapy is a DNS tunneling tool. The code is very light and written in Python. It includes a server and a client. The server can handle multiple clients. DNScapy creates a SSH tunnel through DNS packets. SSH connection, SCP and proxy socks (SSH -D) are supported. You can use CNAME records or TXT records for the tunnel. The default mode is RAND, which uses randomly both CNAME and TXT. DNScapy uses Scapy (http://www.secdev.org/scapy ) for DNS packet forging and for his network automaton API. DNScapy is still under development. The current version is 0.99b and seems to work pretty well. Feel free to clone and test it !