fakeDNS

fakeDNS is a minimal DNS server that resolves all DNS queries to a predefined IP. Currently only A-records are supported (MX queries are a future addition). Useful for forcing bots and other malicious code to use your own services for analysis — mail, web, IRC servers, etc.

To use, modify your network settings to use this app as your DNS server. Any domain-name request will then resolve to the IP you specify.

See also

• MailPot — commonly paired with fakeDNS to capture outbound mail from malware.
• sniff_hit — HTTP/IRC/DNS sniffer for observing what comes back through the redirected resolver.