yosangwon / arp-dns-spoof

Sample code for DNS spoofing with ARP poisoning.

Installation(on Debian-based Linux Distribution)

Install Scapy

% sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx
% pip install scapy

Install python-NetfilterQueue

% sudo apt-get install build-essential python-dev libnetfilter-queue-dev
% git clone https://github.com/fqrouter/python-netfilterqueue.git
% cd python-netfilterqueue
% python setup.py install

...and clone this repository!

% git clone https://github.com/devleoper/arp-dns-spoof.git

Usage

ARP poisoning.

% sudo python arp_poison.py -v <victim IP Address> -r <router IP Address>

DNS spoofing.

% sudo python dns_packet_spoof.py

References

• Reliable DNS spoofing with Python: Scapy + Nfqueue
• ARP poisoning with Python