dnschef
dnschef copied to clipboard
DNSChef - DNS proxy for Penetration Testers and Malware Analysts
add output of sinkholed and malicious domain detection to SIEM such as splunk.
`Exception happened during processing of request from ('10.0.0.3', 5172) Traceback (most recent call last): File "/usr/lib/python2.7/SocketServer.py", line 596, in process_request_thread self.finish_request(request, client_address) File "/usr/lib/python2.7/SocketServer.py", line 331, in finish_request self.RequestHandlerClass(request, client_address,...
The two new command line options "--nxdomain" and "--nxdomainv6" let the user specify fake IP addresses which will be returned when an A or AAAA query returns NXDOMAIN.
This patch adds IPtable rules based on the DNS response
Adds an option to not recursively resolve DNS names that are not defined as part of those that are being cooked. Adds an option to specify a python module that...
[_] DNSChef started on interface: 127.0.0.1 [_] Using the following nameservers: 8.8.8.8 [*] No parameters were specified. Running in full proxy mode [!] Failed to open log file for writing....
I'd like to be able to turn off the ANY request getting all of the answers.
~/dns> ./dnschef.py _ _ __ | | version 0.4 | | / _| __| |_ __ ___ ___| |__ ___| |_ / _` | '_ \/ __|/ __| '_ \...