DoJoSec and dnssnarf
Summary: At a DoJoSec meeting, Sean Wilkerson discussed open source monitoring tools in the dsniff suite, including urlsnarf and mailsnarf, used for validating assumptions about security infrastructure and products. When a question came up about a similar tool for DNS snarfing, a working tool was produced in twenty minutes and 6 lines of Python, with output in bind query log format.
What you should know: A DNS snarfing tool that took 6 lines of Python and twenty minutes to write means anyone in your environment can build the equivalent of the dsniff monitoring tools for DNS, so assumptions about what your infrastructure exposes are worth testing rather than trusting.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026