DSniff
Details
| Size: | 123K |
| Last Update: | 2008-05-31 01:16:09 |
| Version: | 2.3 |
| OS Support: | Linux |
| License/Program Type: | GPL (GNU General Public License) |
| Publisher: | Dug Song |
| Price: | $0.00 |
Description:
DSniff 2.3 is networking software developed by Dug Song.
DSniff project is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.).
arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI.
I wrote these tools with honest intentions - to audit my own network, and to demonstrate the insecurity of most network application protocols. Please do not abuse this software.
Requirements:
Berkeley DB
OpenSSL
libpcap
libnids
libnet
arpspoof
redirect packets from a target host (or all hosts) on the LAN intended for another local host by forging ARP replies. this is an extremely effective way of sniffing traffic on a switch. kernel IP forwarding (or a userland program which accomplishes the same, e.g. fragrouter :-) must be turned on ahead of time.
dnsspoof
forge replies to arbitrary DNS address / pointer queries on the LAN. this is useful in bypassing hostname-based access controls, or in implementing a variety of man-in-the-middle attacks (HTTP, HTTPS, SSH, Kerberos, etc).
dsniff
password sniffer. handles FTP, Telnet, SMTP, HTTP, POP, poppass, NNTP, IMAP, SNMP, LDAP, Rlogin, RIP, OSPF, PPTP MS-CHAP, NFS, VRRP, YP/NIS, SOCKS, X11, CVS, IRC, AIM, ICQ, Napster, PostgreSQL, Meeting Maker, Citrix ICA, Symantec pcAnywhere, NAI Sniffer, Microsoft SMB, Oracle SQLNet, Sybase and Microsoft SQL auth info.
dsniff automatically detects and minimally parses each application protocol, only saving the interesting bits, and uses Berkeley DB as its output file format, only logging unique authentication attempts. full TCP/IP reassembly is provided by libnids(3) (likewise for the following tools as well).
filesnarf
saves selected files sniffed from NFS traffic in the current working directory.
macof
flood the local network with random MAC addresses (causing some switches to fail open in repeating mode, facilitating sniffing). a straight C port of the original Perl Net::RawIP macof program.
mailsnarf
a fast and easy way to violate the Electronic Communications Privacy Act of 1986 (18 USC 2701-2711), be careful. outputs selected messages sniffed from SMTP and POP traffic in Berkeley mbox format, suitable for offline browsing with your favorite mail reader (mail -f, pine, etc.).
msgsnarf
record selected messages from sniffed AOL Instant Messenger, ICQ 2000, IRC, and Yahoo! Messenger chat sessions.
sshmitm
SSH monkey-in-the-middle. proxies and sniffs SSH traffic redirected by dnsspoof(8), capturing SSH password logins, and optionally hijacking interactive sessions. only SSH protocol version 1 is (or ever will be) supported - this program is far too evil already.
tcpkill
kills specified in-progress TCP connections (useful for libnids-based applications which require a full TCP 3-whs for TCB creation).
tcpnice
slow down specified TCP connections via "active" traffic shaping. forges tiny TCP window advertisements, and optionally ICMP source quench replies.
urlsnarf
output selected URLs sniffed from HTTP traffic in CLF (Common Log Format, used by almost all web servers), suitable for offline post-processing with your favorite web log analysis tool (analog, wwwstat, etc.).
webmitm
HTTP / HTTPS monkey-in-the-middle. transparently proxies and sniffs web traffic redirected by dnsspoof(8), capturing most "secure" SSL-encrypted webmail logins and form submissions.
webspy
sends URLs sniffed from a client to your local Netscape browser for display, updated in real-time (as the target surfs, your browser surfs along with them, automagically). a fun party trick.
DSniff 2.3 supports english interface languages and works with Linux.
Downloading DSniff 2.3 will take several seconds if you use fast ADSL connection.
0 comments
Add to
DSniff Version History
Related Software
|
|
From category: Networking |
| Audiotag 0.15 is networking software developed by Ryan McDougal. Audiotag is a command-line tool for mass tagging/renaming of audio files. The application was written because i really don\'t like a... |
|
|
From category: System-Administration |
| KdeSudo is a sudo frontend for KDE originally developed by Robert Gruber, and now maintained by Kubuntu developers.... |
|
|
From category: Installer-Setup |
| cron-apt 0.3.0 is installer/setup software developed by Ola Lundqvist. This tool is a quite simple cron job that updates a debian system (by default only apt-get update) using apt-get. You c... |
|
|
From category: Shells |
| The friendly interactive shell is a shell focused on interactive use, discoverability, and friendliness.... |
|
|
From category: Backup |
| RESTORE was developed by Holonyx Ruffdogs and is an enterprise network backup and recovery solution for Unix and Linux systems.... |
|
|
From category: Backup |
| Backup-DVD is a simple script to backup the entire system on a rewritable DVD.... |
|
|
From category: Archiving |
| BinChunker 1.2.0 is archiving software developed by Heikki Hannikainen. BinChunker converts a CD image in a \".bin / .cue\" format (sometimes \".raw / .cue\") to a set of .iso and .cdr tracks. \... |
|
|
From category: Benchmarks |
| diskWriggler 1.0.2 is benchmarks software developed by Gavin Stewart. diskWriggler is a benchmark tool for testing disk-based storage throughput. diskWriggler has been designed to provide a report... |
|
|
From category: Networking |
| Amahi is a a home server for the Power User in You.... |
|
|
From category: System-Administration |
| Afick Webmin module 1.5.3 is system administration software developed by Eric Gerbier. Afick is a security tool, very close from the well known tripwire. Afick Webmin module allows to monitor the c... |
|
|
From category: Networking |
| EtherPuppet 0.2 is networking software developed by Philippe Biondi. EtherPuppet will create a virtual interface (TUN/TAP) between two machines through a TCP connection. Everything seen by t... |
|
|
From category: Operating-Systems |
| Finnix is a self-contained, bootable Linux CD distribution.... |
Leave a comment