Scrag Posted November 25, 2013 Share Posted November 25, 2013 (edited) Hi. Its my first time setting up Dnsspoof. I have watched a lot of youtube videos and have been following along to get a fake test facebook.com phishing page going. Ive gone through a lot of videos and turorials and I must be missing something because mine doesnt work. When you goto www.facebook.com, it just gives you a "page cannot be displayed" page. When I ping www.facebook.com it comes back as 172.16.42.1, so I know the "spoofing" portion works. I have my modified facebook.html and files copied to /www on the pineapple. Below are my config's. Hosts 172.16.42.1 *.facebook.com Redirect.php <?php $ref = "http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']; if (strpos($ref, "example")){ header('Status: 302 Found'); header('Location: example.html'); } if (strpos($ref, "facebook")){ header('Status: 302 Found'); header('Location: facebook.html'); } require('error.php'); ?> Output so far....its loggin my attempts at least dnsspoof output_1385335664.log [November 25 2013 01:20:39] dnsspoof: listening on br-lan [udp dst port 53 and not src 172.16.42.1] 172.16.42.141.54762 > 172.16.42.1.53: 1801+ A? www.facebook.com 172.16.42.141.49251 > 172.16.42.1.53: 49954+ A? www.facebook.com 172.16.42.141.55392 > 172.16.42.1.53: 37161+ A? www.facebook.com 172.16.42.141.54352 > 172.16.42.1.53: 37704+ A? s-static.ak.facebook.com 172.16.42.141.57804 > 172.16.42.1.53: 12638+ A? www.facebook.com 172.16.42.203.44070 > 172.16.42.1.53: 37865+ A? www.facebook.com 172.16.42.203.46406 > 172.16.42.1.53: 34566+ A? www.facebook.com 172.16.42.203.36324 > 172.16.42.1.53: 5921+ A? www.facebook.com index.php <html> <head> <meta http-equiv="REFRESH" content="0;url=redirect.php"> </head> <body> </body> </html> Ive also attached a screen shot of the files in /www on my pineapple. Any advice would be greatly appreciated!! Thanks, Scrag Edited November 25, 2013 by Scrag Quote Link to comment Share on other sites More sharing options...
Scrag Posted November 25, 2013 Author Share Posted November 25, 2013 PS...if I had to guess its not a problem necesarily with dnsspoof - but with the fact my piney wont serve the http page. If I try to browse other files in the www directory it doesnt work. Quote Link to comment Share on other sites More sharing options...
Scrag Posted November 25, 2013 Author Share Posted November 25, 2013 Ok, i think i figured out my own problem. My webserver is serving pages on port 8080 not 80. Quote Link to comment Share on other sites More sharing options...
Sabri Posted February 5, 2014 Share Posted February 5, 2014 Ok, i think i figured out my own problem. My webserver is serving pages on port 8080 not 80. How can I let the webserver serves pages on port 80 and not 8080? Thanks Quote Link to comment Share on other sites More sharing options...
thesugarat Posted February 5, 2014 Share Posted February 5, 2014 Cotica, Have you even tried dnsspoofing yet? Or better yet the RandomRoll infusion? My point is it does not normally use 8080. It uses 80 by default and the posts above seem to say his deviated from this. Quote Link to comment Share on other sites More sharing options...
Sabri Posted February 5, 2014 Share Posted February 5, 2014 Cotica, Have you even tried dnsspoofing yet? Or better yet the RandomRoll infusion? My point is it does not normally use 8080. It uses 80 by default and the posts above seem to say his deviated from this. Yes I have already tried both. It seems that use 8080 for the webserver although I have never touched anything. Quote Link to comment Share on other sites More sharing options...
thesugarat Posted February 5, 2014 Share Posted February 5, 2014 Interesting. Something else to take a look at... Quote Link to comment Share on other sites More sharing options...
thesugarat Posted February 6, 2014 Share Posted February 6, 2014 Ok, Checked everything out and it's all still working normally. RandomRoll works fine and both internal spoofing (Pineapple Surprise) and external spoofing (204.79.197.200 *) i.e. sending everyone to Bing instead of where they want works as well. Don't know what to tell you guys. Didn't see the 8080 problem either. Quote Link to comment Share on other sites More sharing options...
thesugarat Posted February 6, 2014 Share Posted February 6, 2014 Scrag, What device are you using to test your configuration with? And, are you "installing" the fake captive portal files? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.