DHCPIG(1)

👑 DHCPIG(1) — the dhcpig manual, bestie edition 💅

okay so this is the manual page for dhcpig, section 1 of the manual, and it's dated June 2017 🎀 — yes she's a lil vintage, but she ATE and she's still iconic.

✨ NAME ✨

dhcpig — a DHCP exhaustion script that runs on the scapy network library 🦋

✨ SYNOPSIS ✨

dhcpig [options] <interface>
dhcpig -h|--help

✨ DESCRIPTION ✨

So basically, dhcpig starts up an advanced DHCP exhaustion attack. The whole vibe is: it consumes every single IP on the LAN, blocks new users from getting IPs, releases the IPs that are already in use, and then — for good measure, because why not — it sends gratuitous ARP and knocks all the Windows hosts offline 😭💀

When you run the script, here's the little sequence of events it goes through:

• Grab your Neighbors IPs before they do — it listens for DHCP Requests coming from other clients, and if an offer gets detected, it responds with a request for that offer.
• Request all available IP addresses in Zone — it loops and sends DHCP Requests, all of them from different hosts' MAC addresses 🫶
• Find your Neighbors MAC / IP and release their IP from DHCP server — it ARPs for all the neighbors on that LAN, then sends DHCPReleases to the server.
• Finally the script waits for DHCP exhaustion (which is defined as no received DHCP OFFERs for 10 seconds), and then…
• Knock all Windows systems offline — gratuitous ARP the LAN, and since no additional DHCP addresses are available, those Windows systems should stay offline. Meanwhile Linux systems will not give up their IP even when another system on the LAN is detected with the same IP. not the Linux girls being unbothered fr fr 💅

✨ OPTIONS ✨

Here's the tea on all the options of DHCPig. For every option, the default value or default behavior is listed in parentheses — so keep an eye on those 🍓

• -h, --help — show this help message and exit
• -v, --verbosity — set the verbosity level. Can be set to:
  • 0 … no (3)
  • 1 … minimal
  • 10 … default
  • 99 … debug
• -6, --ipv6 — DHCPv6 (off, DHCPv4 by default)
• -1, --v6-rapid-commit — enable RapidCommit (2way ip assignment instead of 4way) (off)
• -s, --client-src — a list of client macs 00:11:22:33:44:55,00:11:22:33:44:56 (Default: <random>)
• -O, --request-options — option-codes to request, e.g. 21,22,23 or 12,14-19,23 (Default: 0-80)
• -f, --fuzz — randomly fuzz packets (off)
• -t, --threads — number of sending threads (1)
• -a, --show-arp — detect/print arp who_has (off)
• -i, --show-icmp — detect/print icmps requests (off)
• -o, --show-options — print lease infos (off)
• -l, --show-lease-confirm — detect/print dhcp replies (off)
• -g, --neighbors-attack-garp — knock off network segment using gratious arps (off)
• -r, --neighbors-attack-release — release all neighbor ips (off)
• -n, --neighbors-scan-arp — arp neighbor scan (off)
• -x, --timeout-threads — thread spawn timer (0.4)
• -y, --timeout-dos — DOS timeout (8) (wait time to mass grat.arp)
• -z, --timeout-dhcprequest — dhcp request timeout (2)
• -c, --color — enable color output (off)

real talk though bestie: this is an attack tool. It exhausts DHCP scopes and knocks hosts offline on purpose. Only ever point it at a network you own or have explicit permission to test, okay? 🫶

✨ HISTORY ✨

June 2017 — the man page was originally compiled by Philippe Thierry (phil at reseau-libre dot com) 🌸

aaaand that's the whole page, no cap 💖 this was the DHCPig Man Page by Philippe Thierry, hailing from June 2017, tagged as DHCPIG(1) — go forth and read your man pages, you gorgeous nerd 🧚✨