How to redirect a external IP to 172.16.42.1

[daniboy92]

I'm investigating many ways to spoof a web, but unfortunately dnsspoof it's outdated... It only works with an old browser or webs that i don't have any interest to spoof...

One day, Darren writes this:

These limitations could potentially be overcome with iptables rules to redirect the IP traffic rather than the DNS queries. Meaning if example.com is cached as 93.184.216.119 and you reroute that IP to 172.16.42.1 it wouldn't matter if the browser has DNS cached or not.

This is the link:
https://forums.hak5.org/index.php?/topic/33101-dnsspoof-success-rate/#entry247268

I don't know how to do this, i'm am a noob with IP Tables, i don't have how to do this...

Hope someone can help me.

Sorry for bad english.

[NullNull]

ssh into your pineapple and type:

iptables -t nat -A PREROUTING -p tcp -dport 80 -j DNAT to-destination 172.16.42.1

This will redirect all trafic (from port 80) to 172.16.42.1

[NullNull]

undo by

iptables -t nat -D PREROUTING -p tcp -dport 80 -j DNAT to-destination 172.16.42.1

[daniboy92]

Thanks for your quick answer KiatoGS, i will try this and summit here.

[Geoff0ne]

*following*

keen to know if this is more effective than dnsspoof

[daniboy92]

root@Pineapple:~# iptables -t nat -A PREROUTING -p tcp -dport 80 -j DNAT to-dest

ination 172.16.42.1

Bad argument `80'

Try `iptables -h' or 'iptables --help' for more information.

This is the results of:

iptables -t nat -A PREROUTING -p tcp -dport 80 -j DNAT to-destination 172.16.42.1

I can't set the IPTables rule...

Edited August 1, 2014 by daniboy92

[fringes]

That's odd, some of the "taks" (as Darren call them) are missing. Try:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 172.16.42.1

And of course change the "-A" to "-D" to drop the rule.

Edited August 1, 2014 by fringes

[NullNull]

That's odd, some of the "taks" (as Darren call them) are missing. Try:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 172.16.42.1

And of course change the "-A" to "-D" to drop the rule.

oups :P

[WPA3]

I have been trying to use no-ip to do this but I can only get it to redirect to my router login and not my pineapple.

Edited August 4, 2014 by s3rocool

[daniboy92]

Yes!!! It works perfectly!!!

Now i can redirect all webs i want! Thanks you guys.