Source: dhcpig
Section: net
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Uploaders: Carlos Henrique Lima Melara <charlesmelara@riseup.net>,
           Philippe Thierry <phil@reseau-libre.net>
Build-Depends: debhelper-compat (= 13),
               dh-sequence-python3,
               pybuild-plugin-pyproject,
               python3-all,
               python3-hatchling,
               python3-pytest <!nocheck>,
               python3-scapy <!nocheck>
Standards-Version: 4.7.3
Homepage: https://github.com/kamorin/DHCPig
Vcs-Git: https://salsa.debian.org/pkg-security-team/dhcpig.git
Vcs-Browser: https://salsa.debian.org/pkg-security-team/dhcpig

Package: dhcpig
Architecture: all
Depends: python3-scapy, ${misc:Depends}, ${python3:Depends}
Recommends: pkexec
Description: DHCP exhaustion and network-hardening validation tool
 DHCPig checks whether a network is hardened against DHCP pool exhaustion,
 forced lease release and gratuitous-ARP disruption. It drains a DHCP pool,
 releases and re-acquires neighbouring leases, evicts hosts from their
 addresses using forged RFC 5227 ARP conflicts, and reports whether the
 network defended itself. It can also passively fingerprint hosts on the
 segment.
 .
 The package provides a command-line tool (dhcpig) and a loopback-bound
 local web UI (dhcpig-web). The web UI is built on the Python standard
 library alone; scapy is the only significant runtime dependency.
 .
 Root privileges are required for raw socket access. Destructive operations
 are opt-in as named subcommands and can be limited with --scope, but there
 is no authorisation gate, so an unscoped run affects the whole segment.
 Leases that are taken are retained rather than released automatically, and
 can be reversed with "dhcpig restore" or "dhcpig release-previous". Only
 run this against networks you own or are explicitly authorised to test.
