[MrRobot]

hi is there a way you can configure on windows settings (network)
a url lets say facebook to another url get the pass and username and use it to redirect to the real facebook so the victim will not see that the password was sent to an email

i would search the forum if i knew what to search...

thanks in advence

[lukejx2]

sounds like a man in the middle attack? maybe?

[moorbes]

I don't know if HSTS allows this anymore(browsers),in 'hosts' file I tried once it works connecting to a specific IP for redirecting to real
Try this : c:\windows\system32\drivers\etc\hosts , add this line :

Code

0.0.0.0     w w w facebook . com

erase spaces in that url
Try to connect to facebook,or just give another websites IP to see what it happens.

(with that 0.0.0.0 configuration you should see ERRORS on browser when you try to access facebook)

[riu41776]

Lol, modern browsers bypass hosts file.

[Hoodie+]

Lol, modern browsers bypass hosts file.

No they don't, lol.

[Vuln]

Lol, modern browsers bypass hosts file.

Not true. I know that some Chromium versions used to do that, but that was quite a while ago.
Maybe you're thinking of browser DNS caching.

[k45h]

Lol, modern browsers bypass hosts file.

What's your 'modern browser(s)'?