https://github.com/abapat/dnspoison
A DNS packet injection and poisoning detection utility
https://github.com/abapat/dnspoison
Last synced: 5 months ago
JSON representation
A DNS packet injection and poisoning detection utility
- Host: GitHub
- URL: https://github.com/abapat/dnspoison
- Owner: abapat
- Created: 2016-08-22T05:53:42.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2016-08-22T06:03:51.000Z (over 8 years ago)
- Last Synced: 2024-08-04T09:06:16.616Z (8 months ago)
- Language: C
- Homepage:
- Size: 6.84 KB
- Stars: 1
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-network-stuff - **1**星
README
# DNSPoison
A DNS packet injection and DNS poisoning detection utility.
DNS Packet Injection:
dnsinject [-i interface] [-f hostnames] expression
-i interface:
Listen on network device (e.g., eth0). If not specified, dnsinject will select a default interface to listen on. The same interface will be used for packet injection.
-f hostnames:
Read a list of IP address and hostname pairs specifying the hostnames to be hijacked. If '-f' is not specified, dnsinject will forge replies for all observed requests with the local machine's IP address as an answer.
is a BPF filter that specifies a subset of the traffic to be
monitored.
DNS injection implemented in C for faster runtime and injection purposes.
DNS Poisoning Detection:
dnsdetect [-i interface] [-r tracefile] expression
-i interface:
Listen on network device (e.g., eth0). If not specified, dnsdetect will select a default interface to listen on.
-r tracefile: Read packets from (tcpdump format).
is a BPF filter that specifies a subset of the traffic to be
monitored.
Once an attack is detected, dnsdetect will print to stdout a detailed alert
containing a printout of both the spoofed and legitimate responses.