{"id":19528835,"url":"https://github.com/netspi/spoofspotter","last_synced_at":"2025-04-26T11:33:29.158Z","repository":{"id":149489548,"uuid":"12598027","full_name":"NetSPI/SpoofSpotter","owner":"NetSPI","description":"A tool to catch spoofed NBNS responses.","archived":false,"fork":false,"pushed_at":"2018-06-13T03:51:53.000Z","size":8,"stargazers_count":50,"open_issues_count":1,"forks_count":23,"subscribers_count":61,"default_branch":"master","last_synced_at":"2025-04-04T12:01:50.690Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/NetSPI.png","metadata":{"files":{"readme":"README.txt","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2013-09-04T17:55:20.000Z","updated_at":"2025-01-08T07:54:38.000Z","dependencies_parsed_at":"2024-01-03T04:13:19.613Z","dependency_job_id":"2f4cfddb-b22f-4777-b4f3-3380d087d705","html_url":"https://github.com/NetSPI/SpoofSpotter","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2FSpoofSpotter","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2FSpoofSpotter/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2FSpoofSpotter/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2FSpoofSpotter/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/NetSPI","download_url":"https://codeload.github.com/NetSPI/SpoofSpotter/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250980893,"owners_count":21517746,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-11T01:20:13.720Z","updated_at":"2025-04-26T11:33:28.855Z","avatar_url":"https://github.com/NetSPI.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"usage: sudo python spoofspotter.py [-h] -i 192.168.1.110 -b 192.168.1.255\n                       [-f /home/nbns.log] [-S true] [-e you@example.com]\n                       [-s 192.168.1.109] [-n EXAMPLEDOMAIN] [-R 5]\n                       [-c true] [-d 5]\n\nA tool to catch spoofed NBNS responses.\n\nRequired arguments:\n  -i 192.168.1.110      The IP of this host\n  -b 192.168.1.255      The Broadcast IP of this host\n  \nOptional arguments:\n  -h, --help            Show this help message and exit\n  -f /home/nbns.log, \n  -F /home/nbns.log\t\tFile name to save a log file\n  -S true               Log to local Syslog - this is pretty beta\n  -e you@example.com    The email to receive alerts at\n  -s 192.168.1.109      Email Server to Send Emails to\n  -n EXAMPLEDOMAIN      The string to query with NBNS, this should be unique\n  -R 5               The number of Garbage SMB Auth requests to send to the attacker\n  -c true               Continue Emailing After a Detection, could lead to spam\n  -d 5                  Time delay (in seconds) between NBNS broadcasts, reduces network noise\n  \t\t\tDefault is set to 1 second between NBNS broadcasts.\n\nExample Usage:\n\tsudo python spoofspotter.py -i 192.168.1.161 -b 192.168.1.255 -n NBNSHOSTQUERY -s 192.168.1.2 -e karl.fosaaen@example.com -f test.log\n\t\t- this will send an email alert to karl.fosaaen@example.com when an attack is identified\n\t\t- this will also log to test.log\n\nRequires Scapy\n\t\t\nTo Do List:\n\tRandomize NBNS Requests\n\t\t-Make it harder for attackers to detect this script\n\tDetection of Responder versus MSF\n\t\t-Make it easier to identify the tool that's spoofing\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetspi%2Fspoofspotter","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnetspi%2Fspoofspotter","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetspi%2Fspoofspotter/lists"}