MBCDN

todo

dsniff ist eine Sammlung von Werkzeugen zum Durchführen von Netzwerkforensik und zum Aufspüren von Schwachstellen. Die Suite enthält verschiedene Tools zum Abfangen und Analysieren von Netzwerkverkehr. Siehe auch DNSChef.

• arpspoof - Send out unrequested (and possibly forged) arp replies.
• dnsspoof - forge replies to arbitrary DNS address / pointer queries on the Local Area Network.
• dsniff - password sniffer for several protocols.
• filesnarf - saves selected files sniffed from NFS traffic.
• macof - flood the local network with random MAC addresses.
• mailsnarf - sniffs mail on the LAN and stores it in mbox format.
• msgsnarf - record selected messages from different Instant Messengers.
• sshmitm - SSH monkey-in-the-middle. proxies and sniffs SSH traffic.
• sshow - SSH traffic analyser.
• tcpkill - kills specified in-progress TCP connections.
• tcpnice - slow down specified TCP connections via “active” traffic shaping.
• urlsnarf - output selected URLs sniffed from HTTP traffic in CLF.
• webmitm - HTTP / HTTPS monkey-in-the-middle. transparently proxies.
• webspy - sends URLs sniffed from a client to your local browser (requires libx11-6 installed).

ArpSpoof

echo 1 > /proc/sys/net/ipv4/ip_forward

arpspoof -i <interface> -t <target_ip> <gateway_ip>

DNSSpoof

echo "192.168.1.100 www.example.com" > dnsspoof_hosts

dnsspoof -i <interface> -f dnsspoof_hosts

DSniff

dsniff -i <interface>

URLSnarf

urlsnarf -i eth0

MailSnarf

mailsnarf -i <interface>