GoSpoof Docs

Basic Usage

2 min read

This guide covers the basic usage of GoSpoof, including common commands and examples.

Starting GoSpoof

Basic Start

Start GoSpoof with default settings (port 4444).

./goSpoof

Specify Port

Bind GoSpoof to a specific port number.

./goSpoof -p 4444

Bind to Specific IP

Bind GoSpoof to a specific IP address.

./goSpoof -i 192.168.1.100

Launch with WebUI

Start GoSpoof with the Command Center interface for visual monitoring.

./goSpoof --WebUI

Common Commands

GoSpoof offers many command line options for different use cases. Here are the most commonly used commands:

  • Setup iptables (-sT): Configure traffic redirection
  • Port configuration (-sP): Define port ranges and specific ports
  • Configuration files (-Y): Load YAML configuration files
  • Logging (-l): Enable detailed logging
  • Background operation (-D): Run as daemon process
  • Security features (-honey): Enable honeypot mode for tracking
  • Performance tuning (-w, -t): Add delays and throttling
  • Special modes (-rg): Use rubber glue mode for attack redirection
  • Web Interface (--WebUI): Launch the Command Center for visual management

For complete command examples and usage patterns, see the Command Line Options Examples section.

Basic Scenarios

This section covers common usage patterns. For specific command examples, see the Command Line Options Examples.

1. Simple Port Scanning Defense

Start GoSpoof to defend against basic port scans by making all ports appear open with fake services. Use basic options like -p for port binding and -i for IP binding.

2. Advanced Deployment (-D, -Y, -l, -honey)

Combine multiple features like daemon mode, configuration files, logging, and honeypot tracking for comprehensive deployment.

3. Maximum Delay Configuration (-t, -w, -honey)

Use throttling and wait delays to significantly slow down scanning tools and waste attacker time.

Logging

Record port scanning alerts to a file.

./goSpoof -l /path/to/logfile.log

WebUI Usage

The WebUI provides a graphical interface for monitoring GoSpoof activities in real-time.

Basic WebUI Monitoring

Launch GoSpoof with WebUI for visual monitoring:

./goSpoof --WebUI

Then open your browser and navigate to http://localhost:3000

WebUI with Logging

Combine WebUI with file logging for comprehensive monitoring:

./goSpoof --WebUI -l /var/log/gospoof.log

WebUI in Daemon Mode

Run GoSpoof with WebUI in the background:

./goSpoof --WebUI -D

Next Steps

Additional Reading

Graph View

Backlinks