{"id":20041601,"url":"https://github.com/rozensoftware/rozmitmat","last_synced_at":"2026-04-24T21:31:48.391Z","repository":{"id":155450932,"uuid":"621990340","full_name":"rozensoftware/rozmitmat","owner":"rozensoftware","description":"ARP \u0026 DNS spoof attack","archived":false,"fork":false,"pushed_at":"2023-08-25T12:37:13.000Z","size":86,"stargazers_count":4,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-06-11T01:41:26.526Z","etag":null,"topics":["arp-poisoning","dns-spoofing","hacking-tool","linux","rust","spying"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rozensoftware.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2023-03-31T20:48:43.000Z","updated_at":"2024-08-02T12:17:01.000Z","dependencies_parsed_at":"2024-11-13T10:47:18.255Z","dependency_job_id":"861c5734-27dc-4338-a7cd-2ce1330dff8a","html_url":"https://github.com/rozensoftware/rozmitmat","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/rozensoftware/rozmitmat","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rozensoftware%2Frozmitmat","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rozensoftware%2Frozmitmat/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rozensoftware%2Frozmitmat/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rozensoftware%2Frozmitmat/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rozensoftware","download_url":"https://codeload.github.com/rozensoftware/rozmitmat/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rozensoftware%2Frozmitmat/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32241591,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-24T13:21:15.438Z","status":"ssl_error","status_checked_at":"2026-04-24T13:21:15.005Z","response_time":64,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["arp-poisoning","dns-spoofing","hacking-tool","linux","rust","spying"],"created_at":"2024-11-13T10:47:14.087Z","updated_at":"2026-04-24T21:31:48.376Z","avatar_url":"https://github.com/rozensoftware.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# rozmitmat\n\nVersion: 0.1.0\n\nThis is a Rust implementation of an ARP and DNS spoof attack.\n\nRozmitmat is a vision of a hacking tool I am developing for a knowledge gathering about how network and Linux/Windows systems work.\nThe project consists of two programs: rozmitmat which does an actual work and rozmitmatgui which is a simple GUI app.\nFor packets manipulation the program uses an external function written in Python with a powerfull package called Scapy. Rozmitmat executes this function which is much simpler than trying doing the same in Rust.\n\nThose apps work on Linux only.\n\n## Building\n\n```bash\nsudo apt-get install libpcap-dev build-essential python3-dev libnetfilter-queue-dev scapy\npip3 install scapy\n```\n\n## Usage\n\nTo execute ARP-DNS MITM attack run rozmitmat as:\n\n```bash\nsudo ./rozmitmat --interface eth0 --target 192.168.0.22 --gateway 192.168.0.1 --domain example.com --redirectto 192.168.0.1\n```\n\n*interface* is the name of the network interface you want to use as the input device\n\n*target* is the target IP of the computer you want to hack\n\n*gateway* is the router IP\n\n*domain* is the domain you'd like to spoof, e.g.: bing.com\n\n*redirectto* is the IP address where the domain address will be redirected to\n\nAdd *--proxy (-p)* to forward HTTP/S communication to a proxy like mitmproxy. Enter a port number which the proxy is listening on.\n\nAdd *--verbose (-v)* for more detailed output. Works the best in conjuction with the *-l* option.\n\nAdd *--log (-l)* for saving pcap file with the traffic; with *-v* option shows data like: DNS requests, source and destination addresses, HTTP body.\n\nYou can write of course also like this:\n\n```bash\nsudo ./rozmitmat -i eth0 -t 192.168.0.22 -g 192.168.0.1 -d example.com -r 192.168.0.1\n```\n\nIf you only want to spoof ARP:\n\n```bash\nsudo ./rozmitmat -i eth0 -t 192.168.0.22 -g 192.168.0.1 -v 1 -l 1\n```\n\nCreate forwarding to a proxy:\n\n```bash\nsudo ./rozmitmat -i eth0 -t 192.168.0.22 -g 192.168.0.1 -v 1 -l 1 -p 8080\n```\n\nIn two cases above a DNS spoof attack will not be executed. Now you're a man in the middle and you can use other tools for more advanced actions.\n\nCTRL-C will stop execution. The program will try to reverse changes: clean iptables and set original ARP data. If you had a previously set iptables all will be wiped out, nat also.\n\n*pcap* file will be created in the working directory if *--log* parameter has been specified. It can be read by Wireshark for a future analysis.\n\n\n## GUI\n\n![rozmitmatgui](https://github.com/rozensoftware/rozmitmat/blob/master/rozmitmatgui.jpg)\n\nRight click on the Output windows to see a sub-menu.\n\nIt uses egui (https://github.com/emilk/egui)\n\nYou have to copy rozmitmat to a rozmitmatgui's folder. Remember to run rozmitmatgui as root with *sudo* command or *su*.\n\n## Note\n\nI found that DNS spoofing implemented here not working well. Seems like only DNS requests based on UDP protocol could be spoofed.\nI invite you to take a part in this project if you'd like to help.\n\n## License\n\nThis project is licensed under either of\n\nApache License, Version 2.0, (LICENSE-APACHE or \u003chttp://www.apache.org/licenses/LICENSE-2.0\u003e)\nMIT license (LICENSE-MIT or \u003chttp://opensource.org/licenses/MIT\u003e)\nat your option.\n\n## Disclaimer\n\nThe author of this code is not responsible for the incorrect operation of the presented code and/or for its incorrect use. The code presented in this project is intended to serve only to learn programming. :)\n\n## Contributing / Feedback\n\nI am always glad to learn from anyone.\nIf you want to contribute, you are more than welcome to be a part of the project! Try to share your thoughts first! Feel free to open a new issue if you want to discuss new ideas.\n\nAny kind of feedback is welcome!\n\nThe work is based on the (\u003chttps://github.com/gcarq/arp-spoof\u003e) repository.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frozensoftware%2Frozmitmat","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frozensoftware%2Frozmitmat","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frozensoftware%2Frozmitmat/lists"}