Source: dhcpig Section: net Maintainer: Debian Security Tools Uploaders: Carlos Henrique Lima Melara , Philippe Thierry Build-Depends: debhelper-compat (= 13), dh-sequence-python3, pybuild-plugin-pyproject, python3-all, python3-hatchling, python3-pytest , python3-scapy Standards-Version: 4.7.3 Homepage: https://github.com/kamorin/DHCPig Vcs-Git: https://salsa.debian.org/pkg-security-team/dhcpig.git Vcs-Browser: https://salsa.debian.org/pkg-security-team/dhcpig Package: dhcpig Architecture: all Depends: python3-scapy, ${misc:Depends}, ${python3:Depends} Recommends: pkexec Description: DHCP exhaustion and network-hardening validation tool DHCPig checks whether a network is hardened against DHCP pool exhaustion, forced lease release and gratuitous-ARP disruption. It drains a DHCP pool, releases and re-acquires neighbouring leases, evicts hosts from their addresses using forged RFC 5227 ARP conflicts, and reports whether the network defended itself. It can also passively fingerprint hosts on the segment. . The package provides a command-line tool (dhcpig) and a loopback-bound local web UI (dhcpig-web). The web UI is built on the Python standard library alone; scapy is the only significant runtime dependency. . Root privileges are required for raw socket access. Destructive operations are opt-in as named subcommands and can be limited with --scope, but there is no authorisation gate, so an unscoped run affects the whole segment. Leases that are taken are retained rather than released automatically, and can be reversed with "dhcpig restore" or "dhcpig release-previous". Only run this against networks you own or are explicitly authorised to test.