DNS Spoofing- Ettercap Backtrack5 Tutorial

[Fed0t]

hi all

i found these two great tutorials in DNS spoofing so there you go

1.Social Engineering toolkit Tutorial-Backtrack 5

Backtrack 5 Social Engineering toolkit tutorial- hack windows - YouTube

2.DNS Spoofing- Ettercap Backtrack5 Tutorial

What Is DNS Spoofing?

DNS spoofing is an attack that can categorize under Man-In-The-Middle-Attack, beside DNS Spoofing MIMA contain:

ARP poisoning

Sessions hijacking

SSL hijacking

DNS Spoofing

Each attack has its own importance but to be sure it is very difficult to discuss all attacks in single article, I will post some more articles related to MIMA.

DNS spoofing is an attack in which an attacker force victim to enter his credential into a fake website, the term fake does not mean that the website is a phishing page while. To understand DNS spoofing refer to this pictures.

In the normal communication a user send request to the real DNS server while if an attacker spoof the DNS server than this attack is called Man-In-The-Middle-Attack.

Now the question is how to perform DNS spoofing attack, the term spoofing is very similar with sniffing and the sniffing tools can used to perform spoofing attack. For this article I will use ettercap.

[l34k]

Frumos.

Faza e ca toata treaba se petrece pe PC-ul local al omului. Era interesant de vazut cum puteai sa faci ca alte calculatoare din retea sa fie redirectate catre pagina aia (fara acces pe gateway, evident).

[co4ie]

Fara sa ai acces la retea nu se poate!!totusi poti face minuni cu ettercap!!

[l34k]

Fara sa ai acces la retea nu se poate!!totusi poti face minuni cu ettercap!!

Corect, eu ziceam scenariul urmator:

- sa ai acces la retea (sa fii conectat la reteaua respectiva) dar sa NU ai acces pe gateway-ul retelei respective.

[co4ie]

Nu trebuie decat sa fii conectat la retea.. tit ce faci e sa te dai drept dns... practic cel mai simplu de demonstrat asta e cu o retea mica si un router! poti folosi ettercap,squid,sslstrip.. si mai sunt cateva!cu ettercap iti poti face propriile filtre si e f usor sa te joci cu traficul!!