A full python tool for simulating Ethereum address poisoning attacks for educational and security research purposes. This tool generates vanity addresses that mimic a target address and sends nominal transactions to execute the poisoning of a user's transaction history.
This tool is intended strictly for educational purposes and authorized security research. Misusing this tool to deceive or harm others can result in significant financial loss and is illegal.
- Do not use this tool against any address or entity without their explicit, written consent.
- The developers assume no liability and are not responsible for any misuse or damage caused by this tool. By using this software, you agree to use it lawfully and ethically.
This tool automates the address poisoning for security testing:
- Scan: The tool scan the network for USDT transfers.
- Vanity Address Generation: The tool generates addresses that match a specified number of prefix and suffix characters of the target address.
- Transaction Simulation: Using a provided RPC endpoint and private key, the tool sends a configurable, near-zero value transaction from each generated vanity address to the target address.
- Logging: The tool outputs the generated addresses and corresponding transaction hashes for analysis.
-
Clone the repository:
git clone https://github.com/1652933138/eth-address-poisoning-tool.git cd eth-address-poisoning-tool -
Install dependencies:
pip install -r requirements.txt
-
Configure the tool: Rename
env.exampleto.envand edit it with your RPC URL, private key, and default transaction value.
py poison.pyContributions are welcome. Please fork the repository, create a feature branch, and open a pull request with a clear description of your changes.
