evillimiter-dk 1.6.0__tar.gz

evillimiter_dk-1.6.0/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2019-2026 bitbrute
+Copyright (c) 2026 DavidsonRafaelK (fork-specific changes)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

evillimiter_dk-1.6.0/PKG-INFO

@@ -0,0 +1,187 @@
+Metadata-Version: 2.4
+Name: evillimiter-dk
+Version: 1.6.0
+Summary: Monitors, analyzes and limits the bandwidth of devices on the local network
+Home-page: https://github.com/DavidsonRafaelK/evillimiter
+Author: DavidsonRafaelK
+Author-email: davidsonrafael20@gmail.com
+License: MIT
+Keywords: evillimiter,limit,bandwidth,network
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: Intended Audience :: System Administrators
+Classifier: Intended Audience :: Developers
+Classifier: Natural Language :: English
+Classifier: Operating System :: Unix
+Classifier: Programming Language :: Python :: 3.7
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: System :: Networking
+Requires-Python: >= 3
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: colorama
+Requires-Dist: netaddr
+Requires-Dist: netifaces
+Requires-Dist: tqdm
+Requires-Dist: scapy
+Requires-Dist: terminaltables
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: keywords
+Dynamic: license
+Dynamic: license-file
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+<p align="center"><img src="https://i.imgur.com/CBGh0Yx.png" /></p>
+
+# Evil Limiter
+
+[![License Badge](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![Compatibility](https://img.shields.io/badge/python-3-brightgreen.svg)](PROJECT)
+[![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg)](https://GitHub.com/Naereen/StrapDown.js/graphs/commit-activity)
+[![Open Source Love](https://badges.frapsoft.com/os/v3/open-source.svg?v=102)](https://github.com/ellerbrock/open-source-badge/)
+
+> This project is a maintained fork of [bitbrute/evillimiter](https://github.com/bitbrute/evillimiter). The upstream repository is no longer maintained, so this fork continues development - bug fixes, new features, and compatibility updates. See [Fork-specific changes](#fork-specific-changes) below.
+
+A tool to monitor, analyze and limit the bandwidth (upload/download) of devices on your local network without physical or administrative access.<br>
+```evillimiter``` employs [ARP spoofing](https://en.wikipedia.org/wiki/ARP_spoofing) and [traffic shaping](https://en.wikipedia.org/wiki/Traffic_shaping) to throttle the bandwidth of hosts on the network. On IPv6-enabled networks, [NDP spoofing](https://en.wikipedia.org/wiki/Address_Resolution_Protocol#Vulnerabilities) is used alongside ARP spoofing to also cut off a host's IPv6 traffic, which would otherwise bypass the IPv4-only limit/block.
+
+**Searching for a Windows-compatible version?**<br>
+Check out the open-source alternative [EvilLimiter for Windows](https://github.com/bitbrute/evillimiter-windows).
+
+## Requirements
+- Linux distribution
+- Python 3 or greater
+
+Possibly missing python packages will be installed during the installation process.
+
+#### Compatibility notes
+
+```evillimiter``` locates ```tc```, ```iptables``` and ```sysctl``` via ```PATH``` at startup and errors clearly if one is missing. It shells out to the ```iptables``` binary specifically - on distros where ```iptables``` is an ```iptables-nft``` compatibility shim this generally works, but a firewall managed purely through native ```nft``` rules with no ```iptables``` shim installed is not something this tool talks to.
+
+## Installation
+
+```bash
+git clone https://github.com/DavidsonRafaelK/evillimiter.git
+cd evillimiter
+python3 -m venv .venv
+source .venv/bin/activate
+pip install .
+```
+
+Run it with ```sudo``` (raw sockets, ```iptables```/```tc``` need root) - it's the run that needs root, not the install:
+
+```bash
+sudo .venv/bin/evillimiter
+```
+
+Note: ```sudo python3 setup.py install``` (the old instructions) is deprecated in modern setuptools and often fails outright with ```ModuleNotFoundError: No module named 'setuptools'``` - ```sudo``` runs the system Python, which usually doesn't have setuptools installed, unlike the venv's own Python that ```pip``` manages for you. On distros that enforce [PEP 668](https://peps.python.org/pep-0668/) (Arch, Debian 12+, ...), installing outside a venv is blocked entirely for this reason.
+
+Alternatively, you can download a desired version from the [Release page](https://github.com/DavidsonRafaelK/evillimiter/releases).<br>
+
+## Usage
+
+Type ```evillimiter``` or ```python3 bin/evillimiter``` to run the tool.
+
+```evillimiter``` will try to resolve required information (network interface, netmask, gateway address, ...) on its own, automatically.
+
+<p align="center"><img src="https://raw.githubusercontent.com/DavidsonRafaelK/evillimiter/master/docs/images/screenshot.png" alt="evillimiter running in a terminal" width="800" /></p>
+
+#### Command-Line Arguments
+
+| Argument | Explanation |
+| -------- | ----------- |
+| ```-h``` | Displays help message listing all command-line arguments |
+| ```-i [Interface Name]``` | Specifies network interface (resolved if not specified)|
+| ```-g [Gateway IP Address]``` | Specifies gateway IP address (resolved if not specified)|
+| ```-m [Gateway MAC Address]``` | Specifies gateway MAC address (resolved if not specified)|
+| ```-n [Netmask Address]``` | Specifies netmask (resolved if not specified)|
+| ```-f``` | Flushes current iptables and tc configuration. Ensures that packets are dealt with correctly.|
+| ```--colorless``` | Disables colored output |
+| ```-l [File Path]```, ```--log-file [File Path]``` | Also appends every ok/error message to this file (plain text, no color codes). |
+| ```--version``` | Prints the installed version and exits. |
+
+#### Config file
+
+Any of the flags above (except ```-f```/```--flush```, which is a one-shot action, not a persisted preference) can be given a default in an optional ini file at ```~/.config/evillimiter/config.ini``` (or ```$XDG_CONFIG_HOME/evillimiter/config.ini```). A command-line flag always overrides the config file.
+
+```ini
+[general]
+interface = wlan0
+colorless = true
+log_file = /var/log/evillimiter.log
+
+[watch]
+interval = 30
+range = 192.168.1.1-192.168.1.50
+```
+
+```[watch]``` sets the initial values normally set at runtime via ```watch set interval```/```watch set range``` (see below), so they don't need to be re-entered every session.
+
+#### ```evillimiter``` Commands
+
+| Command | Explanation |
+| ------- | ----------- |
+| ```scan (--range [IP Range])``` | Scans your network for online hosts. One of the first things to do after start.<br>```--range``` lets you specify a custom IP range.<br>For example: ```scan --range 192.168.178.1-192.168.178.40``` or just ```scan``` to scan the entire subnet.
+| ```hosts (--force)``` | Displays all the hosts/devices previously scanned and basic information. Shows ID for each host that is required for interaction.<br>```--force``` forces the table to be shown, even when it doesn't fit the terminal.
+| ```limit [ID1,ID2,...] [Rate] (--upload) (--download)``` | Limits bandwidth of host(s) associated to specified ID. Rate determines the internet speed. Host(s) are automatically added to the watchlist.<br>```--upload``` limits outgoing traffic only.<br>```--download``` limits incoming traffic only.<br>Valid rates: ```bit```, ```kbit```, ```mbit```, ```gbit```<br>For example: ```limit 4,5,6 200kbit``` or ```limit all 1gbit```
+| ```block [ID1,ID2,...] (--upload) (--download)``` | Blocks internet connection of host(s) associated to specified ID. Host(s) are automatically added to the watchlist.<br>```--upload``` limits outgoing traffic only <br>```--download``` limits incoming traffic only.
+| ```free [ID1,ID2,...]``` | Unlimits/Unblocks host(s) associated to specified ID. Removes all further restrictions.
+| ```add [IP] (--mac [MAC])``` | Adds custom host to host list. MAC-Address will be resolved automatically or can be specified manually.<br>For example: ```add 192.168.178.24``` or ```add 192.168.1.50 --mac 1c:fc:bc:2d:a6:37```
+| ```monitor (--interval [time in ms])``` | Monitors bandwidth usage of limited host(s) (current usage, total bandwidth used, ...).<br>```--interval``` sets the interval after bandwidth information get refreshed in milliseconds (default 500ms).<br>For example: ```monitor --interval 1000```
+| ```analyze [ID1,ID2,...] (--duration [time in s])``` | Analyzes traffic of host(s) without limiting to determine who uses how much bandwidth.<br>```--duration``` specifies the duration of the analysis in seconds (default 30s).<br>For example: ```analyze 2,3 --duration 120```
+| ```watch``` | Shows current watch status, including each watched host's Online/Offline state as of the last scan sweep. The watch feature detects when a host reconnects with a different IP address.<br>Hosts are added to the watchlist automatically upon ```limit``` or ```block```.
+| ```watch add [ID1,ID2,...]``` | Adds specified host(s) to the watchlist.<br>For example: ```watch add 6,7,8```
+| ```watch remove [ID1,ID2,...]``` | Removes specified host(s) from the watchlist.<br>For example: ```watch remove all```
+| ```watch set [Attribute] [Value]``` | Changes current watch settings. The following attributes can be changed:<br>```range``` is the IP range to scan for reconnects.<br>```interval``` is the time to wait between each network scan (in seconds).<br>For example: ```watch set interval 120```
+| ```clear``` | Clears the terminal window.
+| ```quit``` | Quits the application.
+| ```?```, ```help``` | Displays command information similar to this one.
+
+## Restrictions
+
+- **Rate-limits IPv4 traffic only**, since [ARP spoofing](https://en.wikipedia.org/wiki/ARP_spoofing) requires the ARP packet that is only present on IPv4 networks. On networks with an IPv6 default route, a host's IPv6 traffic is instead fully blocked via NDP spoofing rather than rate-limited, since the ```tc```/```iptables``` rules that shape traffic are IPv4-only.
+- **Cellular fallback defeats it.** A blocked/limited phone can just switch to LTE/5G once WiFi degrades (Android "avoid poor connections", iOS equivalents) - that traffic never touches your network at all.
+- **MAC-randomizing devices reappear as a new host on reconnect.** Many phones present a different MAC per network join by default, so ```watch``` (matches by MAC) can't follow them; the old restriction is left bound to a MAC/IP nobody uses anymore.
+- **Already-open connections can straggle.** A stream/download in progress doesn't always re-resolve the gateway's address mid-flight, so it can keep flowing on a stale ARP/NDP cache entry until it naturally resets - new connections are caught immediately.
+- **Devices on a different subnet/VLAN are invisible.** Band-steering mesh systems that split 2.4GHz/5GHz onto separate subnets can let a host roam outside the scanned IP range entirely.
+- **A second network path bypasses it.** A device that also has Ethernet (mainly laptops, not phones) can switch to it and land on an untouched segment.
+- **Managed switches with Dynamic ARP Inspection can block the spoofing outright.** Irrelevant on typical home routers, matters on corporate/enterprise networks.
+
+## Fork-specific changes
+
+Everything below was added in this fork, on top of upstream's last release (v1.5.0):
+
+- IPv6 (NDP) spoofing, so `limit`/`block` also cover a host's IPv6 traffic instead of only IPv4
+- Optional config file (`~/.config/evillimiter/config.ini`) for default flags and watch settings
+- `-l`/`--log-file` to persist ok/error messages to a file
+- `--version` flag
+- mDNS/NetBIOS/DHCP hostname fallback when reverse DNS fails
+- `block` now also blocks the `INPUT`/`OUTPUT` chains (traffic to/from this machine itself), not just `FORWARD`
+- `watch` now shows each watched host's Online/Offline status and auto-watches hosts on `limit`/`block`
+- Host tracking keyed off MAC address instead of IP (fixes reconnect detection and a hash/equality bug)
+- `limit`/`block` report `tc`/`iptables` failures instead of silently claiming success
+- Fixed a false-positive/duplicate-command bug in restriction teardown for combined upload+download limits/blocks
+- Fixed `ByteValue` formatting for totals in the terabyte range
+- CI running the test suite on every push/PR
+
+See [CHANGELOG](CHANGELOG) for the full version history, including upstream's.
+
+## Contributing
+
+Want to report a bug, request a feature, or submit a pull request? See [CONTRIBUTING.md](CONTRIBUTING.md) for the rules on filing issues and opening PRs. Please also read the [Code of Conduct](CODE_OF_CONDUCT.md).
+
+## Disclaimer
+[Evil Limiter](https://github.com/DavidsonRafaelK/evillimiter) - originally created by [bitbrute](https://github.com/bitbrute), now maintained by [DavidsonRafaelK](https://github.com/DavidsonRafaelK) - is provided "as is" and "with all faults". Neither the original author nor the current maintainer makes any representations or warranties of any kind concerning the safety, suitability, lack of viruses, inaccuracies, typographical errors, or other harmful components of this software. There are inherent dangers in the use of any software, and you are solely responsible for determining whether Evil Limiter is compatible with your equipment and other software installed on your equipment. You are also solely responsible for the protection of your equipment and backup of your data, and neither party will be liable for any damages you may suffer in connection with using, modifying, or distributing this software.
+
+## License
+
+Copyright (c) 2019-2026 by [bitbrute](https://github.com/bitbrute), copyright (c) 2026 by [DavidsonRafaelK](https://github.com/DavidsonRafaelK) for fork-specific changes. Some rights reserved.<br>
+[Evil Limiter](https://github.com/DavidsonRafaelK/evillimiter) is licensed under the MIT License as stated in the [LICENSE file](LICENSE).

evillimiter_dk-1.6.0/README.md

@@ -0,0 +1,146 @@
+<p align="center"><img src="https://i.imgur.com/CBGh0Yx.png" /></p>
+
+# Evil Limiter
+
+[![License Badge](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![Compatibility](https://img.shields.io/badge/python-3-brightgreen.svg)](PROJECT)
+[![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg)](https://GitHub.com/Naereen/StrapDown.js/graphs/commit-activity)
+[![Open Source Love](https://badges.frapsoft.com/os/v3/open-source.svg?v=102)](https://github.com/ellerbrock/open-source-badge/)
+
+> This project is a maintained fork of [bitbrute/evillimiter](https://github.com/bitbrute/evillimiter). The upstream repository is no longer maintained, so this fork continues development - bug fixes, new features, and compatibility updates. See [Fork-specific changes](#fork-specific-changes) below.
+
+A tool to monitor, analyze and limit the bandwidth (upload/download) of devices on your local network without physical or administrative access.<br>
+```evillimiter``` employs [ARP spoofing](https://en.wikipedia.org/wiki/ARP_spoofing) and [traffic shaping](https://en.wikipedia.org/wiki/Traffic_shaping) to throttle the bandwidth of hosts on the network. On IPv6-enabled networks, [NDP spoofing](https://en.wikipedia.org/wiki/Address_Resolution_Protocol#Vulnerabilities) is used alongside ARP spoofing to also cut off a host's IPv6 traffic, which would otherwise bypass the IPv4-only limit/block.
+
+**Searching for a Windows-compatible version?**<br>
+Check out the open-source alternative [EvilLimiter for Windows](https://github.com/bitbrute/evillimiter-windows).
+
+## Requirements
+- Linux distribution
+- Python 3 or greater
+
+Possibly missing python packages will be installed during the installation process.
+
+#### Compatibility notes
+
+```evillimiter``` locates ```tc```, ```iptables``` and ```sysctl``` via ```PATH``` at startup and errors clearly if one is missing. It shells out to the ```iptables``` binary specifically - on distros where ```iptables``` is an ```iptables-nft``` compatibility shim this generally works, but a firewall managed purely through native ```nft``` rules with no ```iptables``` shim installed is not something this tool talks to.
+
+## Installation
+
+```bash
+git clone https://github.com/DavidsonRafaelK/evillimiter.git
+cd evillimiter
+python3 -m venv .venv
+source .venv/bin/activate
+pip install .
+```
+
+Run it with ```sudo``` (raw sockets, ```iptables```/```tc``` need root) - it's the run that needs root, not the install:
+
+```bash
+sudo .venv/bin/evillimiter
+```
+
+Note: ```sudo python3 setup.py install``` (the old instructions) is deprecated in modern setuptools and often fails outright with ```ModuleNotFoundError: No module named 'setuptools'``` - ```sudo``` runs the system Python, which usually doesn't have setuptools installed, unlike the venv's own Python that ```pip``` manages for you. On distros that enforce [PEP 668](https://peps.python.org/pep-0668/) (Arch, Debian 12+, ...), installing outside a venv is blocked entirely for this reason.
+
+Alternatively, you can download a desired version from the [Release page](https://github.com/DavidsonRafaelK/evillimiter/releases).<br>
+
+## Usage
+
+Type ```evillimiter``` or ```python3 bin/evillimiter``` to run the tool.
+
+```evillimiter``` will try to resolve required information (network interface, netmask, gateway address, ...) on its own, automatically.
+
+<p align="center"><img src="https://raw.githubusercontent.com/DavidsonRafaelK/evillimiter/master/docs/images/screenshot.png" alt="evillimiter running in a terminal" width="800" /></p>
+
+#### Command-Line Arguments
+
+| Argument | Explanation |
+| -------- | ----------- |
+| ```-h``` | Displays help message listing all command-line arguments |
+| ```-i [Interface Name]``` | Specifies network interface (resolved if not specified)|
+| ```-g [Gateway IP Address]``` | Specifies gateway IP address (resolved if not specified)|
+| ```-m [Gateway MAC Address]``` | Specifies gateway MAC address (resolved if not specified)|
+| ```-n [Netmask Address]``` | Specifies netmask (resolved if not specified)|
+| ```-f``` | Flushes current iptables and tc configuration. Ensures that packets are dealt with correctly.|
+| ```--colorless``` | Disables colored output |
+| ```-l [File Path]```, ```--log-file [File Path]``` | Also appends every ok/error message to this file (plain text, no color codes). |
+| ```--version``` | Prints the installed version and exits. |
+
+#### Config file
+
+Any of the flags above (except ```-f```/```--flush```, which is a one-shot action, not a persisted preference) can be given a default in an optional ini file at ```~/.config/evillimiter/config.ini``` (or ```$XDG_CONFIG_HOME/evillimiter/config.ini```). A command-line flag always overrides the config file.
+
+```ini
+[general]
+interface = wlan0
+colorless = true
+log_file = /var/log/evillimiter.log
+
+[watch]
+interval = 30
+range = 192.168.1.1-192.168.1.50
+```
+
+```[watch]``` sets the initial values normally set at runtime via ```watch set interval```/```watch set range``` (see below), so they don't need to be re-entered every session.
+
+#### ```evillimiter``` Commands
+
+| Command | Explanation |
+| ------- | ----------- |
+| ```scan (--range [IP Range])``` | Scans your network for online hosts. One of the first things to do after start.<br>```--range``` lets you specify a custom IP range.<br>For example: ```scan --range 192.168.178.1-192.168.178.40``` or just ```scan``` to scan the entire subnet.
+| ```hosts (--force)``` | Displays all the hosts/devices previously scanned and basic information. Shows ID for each host that is required for interaction.<br>```--force``` forces the table to be shown, even when it doesn't fit the terminal.
+| ```limit [ID1,ID2,...] [Rate] (--upload) (--download)``` | Limits bandwidth of host(s) associated to specified ID. Rate determines the internet speed. Host(s) are automatically added to the watchlist.<br>```--upload``` limits outgoing traffic only.<br>```--download``` limits incoming traffic only.<br>Valid rates: ```bit```, ```kbit```, ```mbit```, ```gbit```<br>For example: ```limit 4,5,6 200kbit``` or ```limit all 1gbit```
+| ```block [ID1,ID2,...] (--upload) (--download)``` | Blocks internet connection of host(s) associated to specified ID. Host(s) are automatically added to the watchlist.<br>```--upload``` limits outgoing traffic only <br>```--download``` limits incoming traffic only.
+| ```free [ID1,ID2,...]``` | Unlimits/Unblocks host(s) associated to specified ID. Removes all further restrictions.
+| ```add [IP] (--mac [MAC])``` | Adds custom host to host list. MAC-Address will be resolved automatically or can be specified manually.<br>For example: ```add 192.168.178.24``` or ```add 192.168.1.50 --mac 1c:fc:bc:2d:a6:37```
+| ```monitor (--interval [time in ms])``` | Monitors bandwidth usage of limited host(s) (current usage, total bandwidth used, ...).<br>```--interval``` sets the interval after bandwidth information get refreshed in milliseconds (default 500ms).<br>For example: ```monitor --interval 1000```
+| ```analyze [ID1,ID2,...] (--duration [time in s])``` | Analyzes traffic of host(s) without limiting to determine who uses how much bandwidth.<br>```--duration``` specifies the duration of the analysis in seconds (default 30s).<br>For example: ```analyze 2,3 --duration 120```
+| ```watch``` | Shows current watch status, including each watched host's Online/Offline state as of the last scan sweep. The watch feature detects when a host reconnects with a different IP address.<br>Hosts are added to the watchlist automatically upon ```limit``` or ```block```.
+| ```watch add [ID1,ID2,...]``` | Adds specified host(s) to the watchlist.<br>For example: ```watch add 6,7,8```
+| ```watch remove [ID1,ID2,...]``` | Removes specified host(s) from the watchlist.<br>For example: ```watch remove all```
+| ```watch set [Attribute] [Value]``` | Changes current watch settings. The following attributes can be changed:<br>```range``` is the IP range to scan for reconnects.<br>```interval``` is the time to wait between each network scan (in seconds).<br>For example: ```watch set interval 120```
+| ```clear``` | Clears the terminal window.
+| ```quit``` | Quits the application.
+| ```?```, ```help``` | Displays command information similar to this one.
+
+## Restrictions
+
+- **Rate-limits IPv4 traffic only**, since [ARP spoofing](https://en.wikipedia.org/wiki/ARP_spoofing) requires the ARP packet that is only present on IPv4 networks. On networks with an IPv6 default route, a host's IPv6 traffic is instead fully blocked via NDP spoofing rather than rate-limited, since the ```tc```/```iptables``` rules that shape traffic are IPv4-only.
+- **Cellular fallback defeats it.** A blocked/limited phone can just switch to LTE/5G once WiFi degrades (Android "avoid poor connections", iOS equivalents) - that traffic never touches your network at all.
+- **MAC-randomizing devices reappear as a new host on reconnect.** Many phones present a different MAC per network join by default, so ```watch``` (matches by MAC) can't follow them; the old restriction is left bound to a MAC/IP nobody uses anymore.
+- **Already-open connections can straggle.** A stream/download in progress doesn't always re-resolve the gateway's address mid-flight, so it can keep flowing on a stale ARP/NDP cache entry until it naturally resets - new connections are caught immediately.
+- **Devices on a different subnet/VLAN are invisible.** Band-steering mesh systems that split 2.4GHz/5GHz onto separate subnets can let a host roam outside the scanned IP range entirely.
+- **A second network path bypasses it.** A device that also has Ethernet (mainly laptops, not phones) can switch to it and land on an untouched segment.
+- **Managed switches with Dynamic ARP Inspection can block the spoofing outright.** Irrelevant on typical home routers, matters on corporate/enterprise networks.
+
+## Fork-specific changes
+
+Everything below was added in this fork, on top of upstream's last release (v1.5.0):
+
+- IPv6 (NDP) spoofing, so `limit`/`block` also cover a host's IPv6 traffic instead of only IPv4
+- Optional config file (`~/.config/evillimiter/config.ini`) for default flags and watch settings
+- `-l`/`--log-file` to persist ok/error messages to a file
+- `--version` flag
+- mDNS/NetBIOS/DHCP hostname fallback when reverse DNS fails
+- `block` now also blocks the `INPUT`/`OUTPUT` chains (traffic to/from this machine itself), not just `FORWARD`
+- `watch` now shows each watched host's Online/Offline status and auto-watches hosts on `limit`/`block`
+- Host tracking keyed off MAC address instead of IP (fixes reconnect detection and a hash/equality bug)
+- `limit`/`block` report `tc`/`iptables` failures instead of silently claiming success
+- Fixed a false-positive/duplicate-command bug in restriction teardown for combined upload+download limits/blocks
+- Fixed `ByteValue` formatting for totals in the terabyte range
+- CI running the test suite on every push/PR
+
+See [CHANGELOG](CHANGELOG) for the full version history, including upstream's.
+
+## Contributing
+
+Want to report a bug, request a feature, or submit a pull request? See [CONTRIBUTING.md](CONTRIBUTING.md) for the rules on filing issues and opening PRs. Please also read the [Code of Conduct](CODE_OF_CONDUCT.md).
+
+## Disclaimer
+[Evil Limiter](https://github.com/DavidsonRafaelK/evillimiter) - originally created by [bitbrute](https://github.com/bitbrute), now maintained by [DavidsonRafaelK](https://github.com/DavidsonRafaelK) - is provided "as is" and "with all faults". Neither the original author nor the current maintainer makes any representations or warranties of any kind concerning the safety, suitability, lack of viruses, inaccuracies, typographical errors, or other harmful components of this software. There are inherent dangers in the use of any software, and you are solely responsible for determining whether Evil Limiter is compatible with your equipment and other software installed on your equipment. You are also solely responsible for the protection of your equipment and backup of your data, and neither party will be liable for any damages you may suffer in connection with using, modifying, or distributing this software.
+
+## License
+
+Copyright (c) 2019-2026 by [bitbrute](https://github.com/bitbrute), copyright (c) 2026 by [DavidsonRafaelK](https://github.com/DavidsonRafaelK) for fork-specific changes. Some rights reserved.<br>
+[Evil Limiter](https://github.com/DavidsonRafaelK/evillimiter) is licensed under the MIT License as stated in the [LICENSE file](LICENSE).

evillimiter_dk-1.6.0/evillimiter/__init__.py

@@ -0,0 +1,17 @@
+import logging
+import warnings
+
+# scapy imports Blowfish and CAST5, which the cryptography package now
+# deprecates; drop those warnings before scapy is imported downstream.
+warnings.filterwarnings('ignore', message=r'.*(Blowfish|CAST5).*')
+
+# Silence scapy's runtime warning emitted on every spoofed is-at ARP reply
+# (op=2 sent at layer 3 without an explicit Ethernet destination MAC).
+logging.getLogger('scapy.runtime').setLevel(logging.ERROR)
+
+# scapy warns that 'iface' has no effect on layer-3 send()/sr1() calls; the
+# routing table already selects the correct interface, so drop the noise.
+warnings.filterwarnings('ignore', message=r".*'iface' has no effect on L3 I/O.*")
+
+__version__ = '1.6.0'
+__description__ = 'Monitors, analyzes and limits the bandwidth of devices on the local network'

evillimiter_dk-1.6.0/evillimiter/common/config.py

@@ -0,0 +1,49 @@
+import os
+import configparser
+
+
+def _default_paths():
+    base = os.environ.get('XDG_CONFIG_HOME', os.path.expanduser('~/.config'))
+    return [os.path.join(base, 'evillimiter', 'config.ini')]
+
+
+def load_config(paths=None):
+    """
+    Reads optional user defaults from an ini file (the first of `paths`
+    that exists; default ~/.config/evillimiter/config.ini, or the
+    $XDG_CONFIG_HOME equivalent). Returns a dict of only the keys
+    actually present - a missing or unreadable file returns {}, so
+    every existing hardcoded default is unaffected unless a value is
+    actually there.
+
+    [general]
+        interface, gateway_ip, gateway_mac, netmask, log_file - strings
+        colorless - bool
+    [watch]
+        interval - int (seconds)
+        range - string, same syntax as `watch set range` / -i CLI ranges
+    """
+    paths = _default_paths() if paths is None else paths
+    parser = configparser.ConfigParser()
+
+    if not parser.read(paths):
+        return {}
+
+    values = {}
+
+    if parser.has_section('general'):
+        general = parser['general']
+        for key in ('interface', 'gateway_ip', 'gateway_mac', 'netmask', 'log_file'):
+            if key in general:
+                values[key] = general[key]
+        if 'colorless' in general:
+            values['colorless'] = general.getboolean('colorless')
+
+    if parser.has_section('watch'):
+        watch = parser['watch']
+        if 'interval' in watch:
+            values['watch_interval'] = watch.getint('interval')
+        if 'range' in watch:
+            values['watch_range'] = watch['range']
+
+    return values

evillimiter_dk-1.6.0/evillimiter/common/globals.py

@@ -0,0 +1,9 @@
+import evillimiter.console.shell as shell
+
+BROADCAST = 'ff:ff:ff:ff:ff:ff'
+
+BIN_TC = shell.locate_bin('tc')
+BIN_IPTABLES = shell.locate_bin('iptables')
+BIN_SYSCTL = shell.locate_bin('sysctl')
+
+IP_FORWARD_LOC = 'net.ipv4.ip_forward'

evillimiter_dk-1.6.0/evillimiter/console/banner.py

@@ -0,0 +1,18 @@
+from .io import IO
+
+
+_MAIN_BANNER = r"""{}
+███████╗██╗   ██╗██╗██╗       ██╗     ██╗███╗   ███╗██╗████████╗███████╗██████╗ 
+██╔════╝██║   ██║██║██║       ██║     ██║████╗ ████║██║╚══██╔══╝██╔════╝██╔══██╗
+█████╗  ██║   ██║██║██║       ██║     ██║██╔████╔██║██║   ██║   █████╗  ██████╔╝
+██╔══╝  ╚██╗ ██╔╝██║██║       ██║     ██║██║╚██╔╝██║██║   ██║   ██╔══╝  ██╔══██╗
+███████╗ ╚████╔╝ ██║███████╗  ███████╗██║██║ ╚═╝ ██║██║   ██║   ███████╗██║  ██║
+╚══════╝  ╚═══╝  ╚═╝╚══════╝  ╚══════╝╚═╝╚═╝     ╚═╝╚═╝   ╚═╝   ╚══════╝╚═╝  ╚═╝
+                {}by bitbrute  ~  limit devices on your network :3
+                                    v[_V_]
+
+""".format(IO.Fore.LIGHTRED_EX, IO.Style.RESET_ALL + IO.Style.BRIGHT)
+
+
+def get_main_banner(version):
+    return _MAIN_BANNER.replace('[_V_]', version)

evillimiter_dk-1.6.0/evillimiter/console/chart.py

@@ -0,0 +1,38 @@
+from evillimiter.console.io import IO
+
+
+class BarChart(object):
+    def __init__(self, draw_char='▇', max_bar_length=30):
+        self.draw_char = draw_char
+        self.max_bar_length = max_bar_length
+        
+        self._data = []
+
+    def add_value(self, value, prefix, suffix=''):
+        self._data.append({ 'value': value, 'prefix': prefix, 'suffix': suffix })
+
+    def get(self, reverse=False):
+        def remap(n, old_min, old_max, new_min, new_max):
+            return (((n - old_min) * (new_max - new_min)) / (old_max - old_min)) + new_min
+        
+        self._data.sort(reverse=reverse, key=lambda x: x['value'])
+
+        max_value = self._data[0]['value'] if reverse else self._data[-1]['value']
+        max_prefix_length = max([len(x['prefix']) for x in self._data]) + 1
+
+        chart = ''
+        
+        for value in self._data:
+            if max_value == 0:
+                bar_length = 0
+            else:
+                bar_length = round(remap(value['value'], 0, max_value, 0, self.max_bar_length))
+            
+            chart += '{}{}: {} {}\n'.format(
+                value['prefix'],
+                ' ' * (max_prefix_length - len(value['prefix'])),
+                self.draw_char * bar_length,
+                value['suffix']
+            )
+
+        return chart[:-1]

evillimiter_dk-1.6.0/evillimiter/console/io.py

@@ -0,0 +1,103 @@
+import re
+import logging
+import colorama
+
+from . import shell
+
+
+class IO(object):
+    _ANSI_CSI_RE = re.compile('\001?\033\\[((?:\\d|;)*)([a-zA-Z])\002?')
+
+    Back = colorama.Back
+    Fore = colorama.Fore
+    Style = colorama.Style
+
+    colorless = False
+    _logger = None
+
+    @staticmethod
+    def initialize(colorless=False, log_file=None):
+        """
+        Initializes console input and output. If log_file is given,
+        every ok()/error() message is additionally appended there
+        (plain text, ANSI stripped) - opt-in, no file is touched
+        otherwise.
+        """
+        IO.colorless = colorless
+        if not colorless:
+            colorama.init(autoreset=True)
+
+        if log_file:
+            try:
+                handler = logging.FileHandler(log_file)
+            except OSError as e:
+                IO.error('could not open log file {}: {}.'.format(log_file, e))
+                return
+
+            handler.setFormatter(logging.Formatter('%(asctime)s %(levelname)s %(message)s'))
+            logger = logging.getLogger('evillimiter')
+            logger.setLevel(logging.INFO)
+            logger.addHandler(handler)
+            IO._logger = logger
+
+    @staticmethod
+    def print(text, end='\n', flush=False):
+        """
+        Writes a given string to the console.
+        """
+        if IO.colorless:
+            text = IO._remove_colors(text)
+
+        print(text, end=end, flush=flush)
+
+    @staticmethod
+    def ok(text, end='\n'):
+        """
+        Print a success status message
+        """
+        IO.print('{}OK{}   {}'.format(IO.Style.BRIGHT + IO.Fore.LIGHTGREEN_EX, IO.Style.RESET_ALL, text), end=end)
+        if IO._logger:
+            IO._logger.info(IO._remove_colors(text))
+
+    @staticmethod
+    def error(text):
+        """
+        Print an error status message
+        """
+        IO.print('{}ERR{}  {}'.format(IO.Style.BRIGHT + IO.Fore.LIGHTRED_EX, IO.Style.RESET_ALL, text))
+        if IO._logger:
+            IO._logger.error(IO._remove_colors(text))
+
+    @staticmethod
+    def spacer():
+        """
+        Prints a blank line for attraction purposes
+        """
+        IO.print('')
+
+    @staticmethod
+    def input(prompt):
+        """
+        Prompts the user for input.
+        """
+        if IO.colorless:
+            prompt = IO._remove_colors(prompt)
+
+        return input(prompt)
+
+    @staticmethod
+    def clear():
+        """
+        Clears the terminal screen
+        """
+        shell.execute('clear')
+
+    @staticmethod
+    def _remove_colors(text):
+        edited = text
+
+        for match in IO._ANSI_CSI_RE.finditer(text):
+                s, e = match.span()
+                edited = edited.replace(text[s:e], '')
+
+        return edited

evillimiter_dk-1.6.0/evillimiter/console/shell.py

@@ -0,0 +1,28 @@
+import os
+import subprocess
+from evillimiter.console.io import IO
+
+DEVNULL = open(os.devnull, 'w')
+
+
+def execute(command, root=True):
+    return subprocess.call('sudo ' + command if root else command, shell=True)
+
+
+def execute_suppressed(command, root=True):
+    return subprocess.call('sudo ' + command if root else command, shell=True, stdout=DEVNULL, stderr=DEVNULL)
+
+
+def output(command, root=True):
+    return subprocess.check_output('sudo ' + command if root else command, shell=True).decode('utf-8')
+
+
+def output_suppressed(command, root=True):
+    return subprocess.check_output('sudo ' + command if root else command, shell=True, stderr=DEVNULL).decode('utf-8')
+
+
+def locate_bin(name):
+    try:
+        return output_suppressed('which {}'.format(name)).replace('\n', '')
+    except subprocess.CalledProcessError:
+        IO.error('missing util: {}, check your PATH'.format(name))