GitHub - m0xiaoxi/evil_dns: very simple evil dns server

非常简单的DNS伪造服务器，用于某环境测试使用。主要功能为rebind DNS，以及简单的DNS伪造。

配置config.py中变量,即可

REBIND_DOMAIN = ['rebind.com']
FAKE_DOMAIN = {'test.com': "202.112.111.111"}

如果要使用rebind_domain，需配置权威指向该服务器

简单测试

# moxiaoxi @ moxiaoxideMacBook-Pro-3 in ~/Desktop/evil_dns [17:47:43]
$ dig test.com @127.0.0.1

; <<>> DiG 9.10.6 <<>> test.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63768
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;test.com.			IN	A

;; ANSWER SECTION:
test.com.		0	IN	A	202.112.111.111

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 09 17:47:59 CST 2019
;; MSG SIZE  rcvd: 42


# moxiaoxi @ moxiaoxideMacBook-Pro-3 in ~/Desktop/evil_dns [17:47:59]
$ dig baidu.com @127.0.0.1

; <<>> DiG 9.10.6 <<>> baidu.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52656
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;baidu.com.			IN	A

;; ANSWER SECTION:
baidu.com.		47	IN	A	123.125.114.144
baidu.com.		47	IN	A	220.181.38.148

;; Query time: 40 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 09 17:48:06 CST 2019
;; MSG SIZE  rcvd: 59


# moxiaoxi @ moxiaoxideMacBook-Pro-3 in ~/Desktop/evil_dns [17:48:06]
$ dig rebind.com @127.0.0.1

; <<>> DiG 9.10.6 <<>> rebind.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64137
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;rebind.com.			IN	A

;; ANSWER SECTION:
rebind.com.		0	IN	A	222.185.163.135

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 09 17:48:19 CST 2019
;; MSG SIZE  rcvd: 44


# moxiaoxi @ moxiaoxideMacBook-Pro-3 in ~/Desktop/evil_dns [17:48:19]
$ dig rebind.com @127.0.0.1

; <<>> DiG 9.10.6 <<>> rebind.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34019
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;rebind.com.			IN	A

;; ANSWER SECTION:
rebind.com.		0	IN	A	127.0.0.1

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 09 17:48:21 CST 2019
;; MSG SIZE  rcvd: 44

Join GitHub today