This software contains multiple tools that can help perform network audits and penetration testing.
The DSniff project offers a suite of tools designed to aid network auditing and penetration testing. These tools include dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy. They operate passively to monitor network traffic for interesting data like passwords, files, and emails.
Additional tools like arpspoof, dnsspoof, and macof aid in intercepting network traffic that is typically unavailable to an attacker. These tools help bypass layer-2 switching and implement variety of man-in-the-middle attacks.
The sshmitm and webmitm tools are designed with active monkey-in-the-middle attacks, and can be used to exploit weak bindings in ad-hoc PKI. They work by redirecting SSH and HTTPS sessions and capturing authentication attempts.
It is worth noting that the creator of these tools made them with honest intentions and urges users not to abuse the software. Despite this warning, the tools have various features, including arpspoof which redirects packets from a target host.
Dnsspoof, on the other hand, can be used to forge replies to arbitrary DNS queries on the LAN. The dsniff tool helps with password sniffing and authentication attempts capture for various protocols such as FTP, Telnet, SMTP, HTTP, POP, and many more.
Filesnarf, mailsnarf, and webspy are for saving, outputting, and sending various traffic data respectively. Finally, tcpkill, tcpnice, and urlsnarf feature tools for killing TCP connections, slowing down TCP connections, and outputting selected URLs from HTTP traffic.
Additional tools like arpspoof, dnsspoof, and macof aid in intercepting network traffic that is typically unavailable to an attacker. These tools help bypass layer-2 switching and implement variety of man-in-the-middle attacks.
The sshmitm and webmitm tools are designed with active monkey-in-the-middle attacks, and can be used to exploit weak bindings in ad-hoc PKI. They work by redirecting SSH and HTTPS sessions and capturing authentication attempts.
It is worth noting that the creator of these tools made them with honest intentions and urges users not to abuse the software. Despite this warning, the tools have various features, including arpspoof which redirects packets from a target host.
Dnsspoof, on the other hand, can be used to forge replies to arbitrary DNS queries on the LAN. The dsniff tool helps with password sniffing and authentication attempts capture for various protocols such as FTP, Telnet, SMTP, HTTP, POP, and many more.
Filesnarf, mailsnarf, and webspy are for saving, outputting, and sending various traffic data respectively. Finally, tcpkill, tcpnice, and urlsnarf feature tools for killing TCP connections, slowing down TCP connections, and outputting selected URLs from HTTP traffic.
What's New
Version 2.3: N/A