teemo is a stealthy, passive network reconnaissance tool that utilizes raw sockets to sniff network traffic for loot
teemo creates a raw socket and binds to an interface which is found using GetAdaptersInfo. once bound, layer 3 traffic is parsed for DNS and mDNS traffic which is stored in a sqlite database for further analysis. this assumes you already have administrative access on the target.
- DNS (A, AAAA, PTR)
- mDNS
cargo build --release --target x86_64-pc-windows-gnu
.\teemo.exe
WORK IN PROGRESS !!