mirror of
https://github.com/vee1e/mitmproxy.git
synced 2026-09-01 18:27:18 +00:00
7093e50826
* add example addon for DNS flows * [autofix.ci] apply automated fixes * fix mypy --------- Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
38 lines
1.2 KiB
Python
38 lines
1.2 KiB
Python
"""
|
|
Spoof DNS responses.
|
|
|
|
In this example, we fiddle with IPv6 (AAAA) records:
|
|
- For example.com, `::1` is returned.
|
|
(domain is hosted on localhost)
|
|
- For example.org, an NXDOMAIN error is returned.
|
|
(domain does not exist)
|
|
- For all other domains, return a non-error response without any records.
|
|
(domain exists, but has no IPv6 configured)
|
|
"""
|
|
|
|
import ipaddress
|
|
import logging
|
|
|
|
from mitmproxy import dns
|
|
|
|
|
|
def dns_request(flow: dns.DNSFlow) -> None:
|
|
q = flow.request.question
|
|
if q and q.type == dns.types.AAAA:
|
|
logging.info(f"Spoofing IPv6 records for {q.name}...")
|
|
if q.name == "example.com":
|
|
flow.response = flow.request.succeed(
|
|
[
|
|
dns.ResourceRecord(
|
|
name="example.com",
|
|
type=dns.types.AAAA,
|
|
class_=dns.classes.IN,
|
|
ttl=dns.ResourceRecord.DEFAULT_TTL,
|
|
data=ipaddress.ip_address("::1").packed,
|
|
)
|
|
]
|
|
)
|
|
elif q.name == "example.org":
|
|
flow.response = flow.request.fail(dns.response_codes.NXDOMAIN)
|
|
else:
|
|
flow.response = flow.request.succeed([])
|