diff --git a/README.md b/README.md
index 6894cc9..beb1a0f 100644
--- a/README.md
+++ b/README.md
@@ -21,7 +21,8 @@ Availible plugins:
 
 So far the most significant changes have been:
 
-- Spoof plugin is live !! Supports ICMP, ARP and DNS spoofing 
+- Spoof plugin is live !! Supports ICMP, ARP and DNS spoofing
+DNS Spoofing code was stolen from https://github.com/DanMcInerney/dnsspoof/ 
 
 - Usage of third party tools has been completely removed (e.g. ettercap)
 
diff --git a/plugins/Spoof.py b/plugins/Spoof.py
index 860e2bd..42ff59d 100644
--- a/plugins/Spoof.py
+++ b/plugins/Spoof.py
@@ -1,3 +1,7 @@
+#
+# DNS Spoofing code has been stolen from https://github.com/DanMcInerney/dnsspoof/
+#
+
 from twisted.internet import reactor
 from twisted.internet.interfaces import IReadDescriptor
 from plugins.plugin import Plugin