Skip to content

HOW TO: run WPF GO dnscrypt proxy md inside a secure offline sandbox

AZ-X edited this page Jun 4, 2020 · 2 revisions

You can run this program inside any sandbox hosting Windows API as you preferred.

For example, a VMware workstation and default setup of a Windows image without network can serve the purpose of network isolation.

For a standard OS (Win 7/8.0/8.1/Server 2008 R2/Server 2012 R2) initialized setup using VMware, you should download and install a Window patch Windows6.1-KB2533623-x64. You need install VMware tools or Microsoft Visual C++ 2015 Redistributable Update 3 by yourself.

If you come across one of the following errors in event log:

  • The program can't start because api-ms-win-crt-runtime-l1-1-0.dll is missing from your computer. Try reinstalling the program to fix this problem.
  • The program can't start because api-ms-win-cor-timezone-l1-1-0.dll is missing from your computer. Try reinstalling the program to fix this problem.
  • The library hostfxr.dll was found, but loading it from C:<path_to_app>\hostfxr.dll failed.

Make sure of above patch and runtime in operation.


You need manually download md files from https://github.com/DNSCrypt/dnscrypt-resolvers/master/v2/ or https://download.dnscrypt.info/resolvers-list/v2/ using your preferred download tool.

I recommend avoiding using dnscrypt proxy to retrieve any md files, since it will either leave your fingerprint (golang-net) or leak information via insecure DNS. Instead, you can use any tool (curl/wget/aria2/.etc, even a browser) randomly.

Put md files in a folder can be visited by the host VM.

Run this program on the hosting OS and you will see below magic. Here you go.

show