dsniff is a collection of tools for network auditing and penetration testing.
Switch branches/tags
Nothing to show
Clone or download
tecknicaltom Integrating patch 04_multiple_intf.dpatch
- Integrating patch from Steve Kemp <skx@debian.org>:
Work with multiple interfaces, Closes #242369.
http://patch-tracker.debian.org/patch/series/view/dsniff/2.4b1+debian-18/04_multiple_intf.dpatch
Latest commit 0f91847 Jun 29, 2010
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
CVS initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
missing initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
CHANGES initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
COPYRIGHT Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
LICENSE updating license/copyright files Jun 24, 2010
Makefile.in initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
README initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
TODO initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
acconfig.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
arp.c Integrating patch 04_multiple_intf.dpatch Jun 29, 2010
arp.h Integrating patch 04_multiple_intf.dpatch Jun 29, 2010
arpspoof.8 initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
arpspoof.c Integrating patch 04_multiple_intf.dpatch Jun 29, 2010
asn1.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
asn1.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
base64.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
base64.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
buf.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
buf.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
config.h.in initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
configure initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
configure.in initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_aim.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_citrix.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_cvs.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_ftp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_hex.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_http.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_icq.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_imap.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_irc.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_ldap.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_mmxp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_mountd.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_napster.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_nntp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_oracle.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_ospf.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_pcanywhere.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_pop.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_portmap.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_postgresql.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_pptp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_rip.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_rlogin.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_smb.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_smtp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_sniffer.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_snmp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_socks.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_tds.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_telnet.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_vrrp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_x11.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
decode_yp.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
dnsspoof.8 initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
dnsspoof.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
dnsspoof.hosts initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
dsniff.8 Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
dsniff.c Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
dsniff.magic initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
dsniff.services initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
filesnarf.8 Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
filesnarf.c Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
hex.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
hex.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
install-sh initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
macof.8 initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
macof.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
magic.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
magic.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
mailsnarf.8 Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
mailsnarf.c Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
mount.x initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
msgsnarf.8 Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
msgsnarf.c Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
nfs_prot.x initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
options.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
pathnames.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
pcaputil.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
pcaputil.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
record.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
record.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
remote.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
rpc.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
rpc.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
ssh.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
ssh.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
sshcrypto.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
sshcrypto.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
sshmitm.8 initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
sshmitm.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
sshow.8 Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
sshow.c Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
tcp_raw.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
tcp_raw.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
tcpkill.8 initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
tcpkill.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
tcpnice.8 initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
tcpnice.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
trigger.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
trigger.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
urlsnarf.8 Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
urlsnarf.c Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
version.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
vroot.h initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
webmitm.8 initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
webmitm.c initial commit of dsniff-2.4b1 from Dug Song's website Jun 23, 2010
webspy.8 Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010
webspy.c Integrating patch 03_pcap_read_dump.dpatch Jun 29, 2010

README

dsniff-2.3
----------

i wrote these tools with honest intentions - to audit my own network,
and to demonstrate the insecurity of cleartext / weakly-encrypted
network protocols and ad-hoc PKI. please do not abuse this software.

these programs require:

      Berkeley DB - http://www.sleepycat.com/
      OpenSSL - http://www.openssl.org/
      libpcap - http://www.tcpdump.org/
      libnids - http://www.packetfactory.net/Projects/Libnids/
      libnet - http://www.packetfactory.net/Projects/Libnet/

built and tested on OpenBSD, Linux, and Solaris. YMMV.

what's here:

arpspoof
	redirect packets from a target host (or all hosts) on the LAN
	intended for another local host by forging ARP replies. this
	is an extremely effective way of sniffing traffic on a switch.
	kernel IP forwarding (or a userland program which accomplishes
	the same, e.g. fragrouter :-) must be turned on ahead of time.

dnsspoof
	forge replies to arbitrary DNS address / pointer queries on
	the LAN. this is useful in bypassing hostname-based access
	controls, or in implementing a variety of man-in-the-middle
	attacks (HTTP, HTTPS, SSH, Kerberos, etc).

dsniff
	password sniffer. handles FTP, Telnet, SMTP, HTTP, POP,
	poppass, NNTP, IMAP, SNMP, LDAP, Rlogin, RIP, OSPF, PPTP
	MS-CHAP, NFS, VRRP, YP/NIS, SOCKS, X11, CVS, IRC, AIM, ICQ,
	Napster, PostgreSQL, Meeting Maker, Citrix ICA, Symantec
	pcAnywhere, NAI Sniffer, Microsoft SMB, Oracle SQL*Net, Sybase
	and Microsoft SQL auth info.

	dsniff automatically detects and minimally parses each
	application protocol, only saving the interesting bits, and
	uses Berkeley DB as its output file format, only logging
	unique authentication attempts. full TCP/IP reassembly is
	provided by libnids(3) (likewise for the following tools as
	well).

filesnarf
	saves selected files sniffed from NFS traffic in the current
	working directory.

macof
	flood the local network with random MAC addresses (causing
	some switches to fail open in repeating mode, facilitating
	sniffing). a straight C port of the original Perl Net::RawIP
	macof program.

mailsnarf
	a fast and easy way to violate the Electronic Communications
	Privacy Act of 1986 (18 USC 2701-2711), be careful. outputs
	selected messages sniffed from SMTP and POP traffic in Berkeley
	mbox format, suitable for offline browsing with your favorite
	mail reader (mail -f, pine, etc.).

msgsnarf
	record selected messages from sniffed AOL Instant Messenger,
	ICQ 2000, IRC, and Yahoo! Messenger chat sessions.

sshmitm
	SSH monkey-in-the-middle. proxies and sniffs SSH traffic
	redirected by dnsspoof(8), capturing SSH password logins, and
	optionally hijacking interactive sessions. only SSH protocol
	version 1 is (or ever will be) supported - this program is far
	too evil already.

sshow
	SSH traffic analysis tool. analyzes encrypted SSH-1 and SSH-2
	traffic, identifying authentication attempts, the lengths of
	passwords entered in interactive sessions, and command line
	lengths.

tcpkill
	kills specified in-progress TCP connections (useful for
	libnids-based applications which require a full TCP 3-whs for
	TCB creation).

tcpnice
	slow down specified TCP connections via "active" traffic
	shaping. forges tiny TCP window advertisements, and optionally
	ICMP source quench replies.

urlsnarf
	output selected URLs sniffed from HTTP traffic in CLF
	(Common Log Format, used by almost all web servers), suitable
	for offline post-processing with your favorite web log
	analysis tool (analog, wwwstat, etc.).

webmitm
	HTTP / HTTPS monkey-in-the-middle. transparently proxies and
	sniffs web traffic redirected by dnsspoof(8), capturing most
	"secure" SSL-encrypted webmail logins and form submissions.

webspy
	sends URLs sniffed from a client to your local Netscape
	browser for display, updated in real-time (as the target
	surfs, your browser surfs along with them, automagically).
	a fun party trick. :-)

-d.

---
http://www.monkey.org/~dugsong/