# iphelix/dnschef

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

Repository: https://github.com/iphelix/dnschef
Canonical: https://ross.abutalabs.com/products/dnschef
Language: Python
License: BSD-3-Clause
License Family: permissive
Last push: 2024-08-16T17:28:15+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 4656, "days_push": 747, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1068, forks 227 (observed 2026-08-28T04:03:27.379169+00:00)

## What it is
DNSChef is a highly configurable DNS proxy (fake DNS) tool written in Python for penetration testers and malware analysts. It can forge DNS responses based on domain lists and wildcards, proxy real responses for non-matching domains, and support IPv6 and multiple record types.

## Use cases
- intercept dns queries from mobile apps that ignore http proxy settings
- redirect malicious domains to a local machine during malware analysis
- fake dns responses for a domain during a penetration test
- set up a fake dns server for network traffic analysis
- spoof dns records with wildcard domain matching
- force an application to connect to a local interception endpoint

## When to choose
- you need a configurable dns proxy with domain filtering and wildcards
- you are doing penetration testing or malware traffic analysis
- you need a cross-platform fake dns tool that runs on python
- you want to selectively forge responses while proxying real ones for other domains

## When to avoid
- you need a production dns server rather than a testing proxy
- you need high-performance dns resolution for real infrastructure
- you want a full dns server with zone management
- you need dnssec validation

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: proxy, networking, security
- domain: security, penetration-testing, networking, developer-tools
- platform: windows, python, cli, cross-platform
- tags: dns-proxy, fake-dns, penetration-testing, traffic-analysis, dns-spoofing, malware-analysis, linux, macos

## Member repositories
- iphelix/dnschef (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:27.379169+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:54:42.643905+00:00, confidence not recorded.
  - readme: https://github.com/iphelix/dnschef (fetched 2026-08-28T04:03:27.379169+00:00, sha bc94c7455d17)
- Data as of 2026-08-30T08:39:29.467469+00:00.