Mar 2, 2017 12:01 AM
(This post was last modified: Mar 2, 2017 01:05 AM by SeriousFrank.)
I've recently study stuff about networking and i'm testing dns spoofing with ettercap on virtual box (kali linux).
What i've done:
> edited the etter.conf file
> edited the etter.dns file with the target url and my ip
> started apache2 on kali linux setting up an index.html
> scanned for hosts, selected the gateway & victim, started the arp poisoning, selected the dns_spoof plugin and started sniffing
When i try to navigate on victim pc to the url that i've written in the etter.dns file this is what i get on ettercap
dns_spoof: A [url] spoofed to [myvirtualbox]
and on victim pc page load normally. I've tried dns spoofing https/http and even nonexistent url but it's not working. What i'm doing wrong? I've also tried bettercap with same result.
I'm not looking for "do 1. 2. 3. 4." answers, it's ok if you give me only some keywords for further researches and understand what's not working/what im doing wrong, thanks in advance for any help.
_________________________________________________________________
EDIT:
I've tried another method:
> ip_forward
> started apache2 with my index.html page
> arpspoof giving "arpspoof -t victim gateway
> arpspoof -t gateway victim"
> started dnsspoof -f hosts.txt host victim
hosts.txt contains "myip *.com"
If i go to domains that exist it doesnt work but if i write random things that doesn't exist like hueheuheuhe.com sometimes it redirect.
What i've done:
> edited the etter.conf file
> edited the etter.dns file with the target url and my ip
> started apache2 on kali linux setting up an index.html
> scanned for hosts, selected the gateway & victim, started the arp poisoning, selected the dns_spoof plugin and started sniffing
When i try to navigate on victim pc to the url that i've written in the etter.dns file this is what i get on ettercap
dns_spoof: A [url] spoofed to [myvirtualbox]
and on victim pc page load normally. I've tried dns spoofing https/http and even nonexistent url but it's not working. What i'm doing wrong? I've also tried bettercap with same result.
I'm not looking for "do 1. 2. 3. 4." answers, it's ok if you give me only some keywords for further researches and understand what's not working/what im doing wrong, thanks in advance for any help.
_________________________________________________________________
EDIT:
I've tried another method:
> ip_forward
> started apache2 with my index.html page
> arpspoof giving "arpspoof -t victim gateway
> arpspoof -t gateway victim"
> started dnsspoof -f hosts.txt host victim
hosts.txt contains "myip *.com"
If i go to domains that exist it doesnt work but if i write random things that doesn't exist like hueheuheuhe.com sometimes it redirect.

