Quick question:
Is it possible to bounce people to an online website using dnsspoof?
For instance, if user goes to www.*.com - they're redirected to www.whatever.com...
Or must it be via IP, for use with SET or whatever...
dnsspoof - ip/host?
Started by pr0l3, Dec 26 2012 09:34 PM
9 replies to this topic
#2
coolgeek
-
- Active Members
-
- 27 posts
Hak5 Fan
- Gender:Male
Posted 26 December 2012 - 09:54 PM
It must be to an ip, but since most www.whatever.com sites have a static ip, that isn't too big of a deal.
#3
pr0l3
-
- Active Members
-
- 35 posts
Hak5 Fan +
Posted 26 December 2012 - 10:02 PM
Was thinking more along the lines of a specific youtube vid or something... but I can come up with something.
#4
coolgeek
-
- Active Members
-
- 27 posts
Hak5 Fan
- Gender:Male
Posted 26 December 2012 - 10:16 PM
Probably the easiest way to accomplish this is creating a page that is hosted on the pineapple that redirects traffic to the rick roll of your choice :-)
#5
pr0l3
-
- Active Members
-
- 35 posts
Hak5 Fan +
Posted 26 December 2012 - 10:23 PM
Yeah, that's what I'm thinking.
#6
pr0l3
-
- Active Members
-
- 35 posts
Hak5 Fan +
Posted 26 December 2012 - 10:38 PM
And I'm falling into a trap I've read about - the page constantly refreshing...
Under the 'configuration' tab, I've added:
dnsspoof:
172.16.42.1 www.google.com
landing page:
<html>
<head>
<meta http-equiv="REFRESH" content="0;url=http://www.espn.com">
</head>
<body>
</body>
</html>
So, when a user types in google.com - they should bounce to espn.com - what I get instead is constant refreshing - with www.espn.com in the address bar.
Thoughts?
Under the 'configuration' tab, I've added:
dnsspoof:
172.16.42.1 www.google.com
landing page:
<html>
<head>
<meta http-equiv="REFRESH" content="0;url=http://www.espn.com">
</head>
<body>
</body>
</html>
So, when a user types in google.com - they should bounce to espn.com - what I get instead is constant refreshing - with www.espn.com in the address bar.
Thoughts?
#7
pr0l3
-
- Active Members
-
- 35 posts
Hak5 Fan +
Posted 26 December 2012 - 10:44 PM
Just playing around with it - and it randomly started working... going to do a full restart - I think it's good now.
#8
Pwnd2Pwnr
-
- Active Members
-
- 544 posts
Hak5 Ninja
- Gender:Male
- Location:Michigan
- Interests:Arduino, Tech, Internet Policy, Development, Learning.
Posted 27 December 2012 - 05:45 AM
Reminds me of the guy whom stole my WEP... I forwarded traffic to xnxx.com... 
... FTW
... FTW
#9
duckmanjbr
-
- Active Members
-
- 9 posts
Hackling
- Gender:Male
- Location:Ocean Springs, MS
Posted 04 January 2013 - 08:39 AM
Just playing around with it - and it randomly started working... going to do a full restart - I think it's good now.
Did you ever come to good fix for this? I've been looking for a good write up on setting up phishing using dnsspoof but have come up a little short and am currently stuck in the "Refresh loop".
Edited by duckmanjbr, 04 January 2013 - 08:39 AM.
#10
pr0l3
-
- Active Members
-
- 35 posts
Hak5 Fan +
Posted 29 April 2013 - 01:07 PM
It just started working randomly.
I'm now trying to set it up again and am stuck int he same loop.
Working a trade show in two days - want to open up a WIFI hotspot and any traffic goes to our website... stuck in the loop. Ideas?
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
