DHCPain: Lease Exhaustion Utility

DHCPain: Lease Exhaustion Utility - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: DHCPain: Lease Exhaustion Utility (/showthread.php?tid=6088045)

DHCPain: Lease Exhaustion Utility - Goodies - Jun 16, 2020

[Image: op8.png]

DHCPain is a simple lease exhaustion utility that I developed for an independent book that I am authoring. I wanted to demonstrate some network attacks, but some tools for DHCP exhaustion are either non-functional with current software versions (DHCPig) or do not properly exhaust leases by responding to DHCP Offer messages. For this reason, DHCPain was created as a very simple tool to exhaust DHCP scopes of a target network. One benefit of this tool is that the source MAC address is not changed per frame, so it will not be mitigated by port security alone. Networks must be secured with DHCP snooping and MAC verification in order to properly avoid this attack.

Code 
pip install dhcpain

Github Link: https://github.com/GoodiesHQ/DHCPain

Code 
git clone https://github.com/GoodiesHQ/DHCPain

cd DHCPain

pip install -r requirements.txt

python dhcpain.py -l

Runs on Linux and Windows:

[Image: 68747470733a2f2f692e696d6775722e636f6d2f...382e706e67]

[Image: 68747470733a2f2f692e696d6775722e636f6d2f...552e706e67]

Eats up DHCP leases on Windows Server, home routers, dhcpd, etc...

[Image: 68747470733a2f2f692e696d6775722e636f6d2f...4f2e706e67]

Does not modify source MAC address of the ethernet frames, so it cannot be prevented by port security alone. DHCP snooping must be enabled for protection.

RE: DHCPain: Lease Exhaustion Utility - Goodies - Jun 19, 2020

No? Nobody interested in MITM via DHCP?

RE: DHCPain: Lease Exhaustion Utility - int13h - Jun 20, 2020

thank you so much! much appreciated amazing tool

RE: DHCPain: Lease Exhaustion Utility - ETH - Jun 21, 2020

(Jun 19, 2020 10:27 AM)Goodies Wrote: No? Nobody interested in MITM via DHCP?

Really many are interested buddy
I hope i could do some MITM on my network with this tool

RE: DHCPain: Lease Exhaustion Utility - Goodies - Mar 15, 2021

Wow what a neat tool, must have taken you a little while to code.

Hey, thanks, how kind of you!

RE: DHCPain: Lease Exhaustion Utility - tux1 - Mar 17, 2021

Interesting tool and thanks for sharing, hope the book is coming along well!