DNSSPOOF(8)

πŸ“¦
version 2.5a2 Β· 2 versions
  • 2.5a2 Β· arch rolling, debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 2.4 Β· epel 9, fedora 43, fedora 44
, in arch rolling, debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’… DNSSPOOF πŸ’…

okay bestie, buckle up, because this is dnsspoof from the System Manager's Manual section 8 (that's the sysadmin-y one, the one where the tools have opinions), and she is lowkey iconic πŸ”₯


✨ NAME ✨

dnsspoof β€” forge replies to DNS address / pointer queries πŸŽ€


🌸 SYNOPSIS 🌸

dnsspoof [-i interface] [-f hostsfile] [expression]

πŸ¦‹ DESCRIPTION πŸ¦‹

So like, dnsspoof forges replies to arbitrary DNS address / pointer queries on the LAN. That's the whole vibe. 🫢

Why would you want that? Two reasons, and they're both very much giving main character energy:

  • bypassing hostname-based access controls πŸ’€
  • implementing a variety of man-in-the-middle attacks 😭
no cap, this is a real network-interception tool. use it on stuff you're allowed to touch, bestie. πŸ™ˆ

πŸ’– OPTIONS πŸ’–

  • -i interface β€” specify the interface to use. pick your fave network card, she's the one doing the sniffing. ✨
  • -f hostsfile β€” specify the pathname of a file in hosts(5) format. only one hostname allowed per line (no aliases, sorry queen, pick one), although hostnames may contain wildcards (such as *.doubleclick.net). that wildcard thing is the moment fr fr πŸ‘‘
  • expression β€” specify a tcpdump(8) filter expression to select traffic to sniff. it's giving "choose your own adventure" but for packets. 🌈

If no hostsfile is specified, replies will be forged for all address queries on the LAN with an answer of the local machine's IP address. literally every single one. no filter, no chill. ⭐


πŸŽ€ FILES πŸŽ€

  • /usr/share/dsniff/dnsspoof.hosts β€” sample hosts file. it's the starter pack, the template, the little reference bestie. 🌸

πŸ‘‘ SEE ALSO πŸ‘‘

dsniff(8), hosts(5)

go read those too, they're the supporting cast and they ate. πŸ’…


πŸ’œ AUTHOR πŸ’œ

Dug Song <dugsong@monkey.org> β€” the legend herself, we stan 🫢


and that's the whole page, babe!! this was DNSSPOOF(8) from the System Manager's Manual β€” same title, same section, top and bottom, she's symmetric like that. stay safe out there, sniff responsibly, and remember: wildcards are allowed, aliases are not. periodt. πŸ’…βœ¨πŸŽ€