Results 1 to 3 of 3

Thread: Fake AP + DNS Spoof

  1. #1
    Just burned his ISO
    Join Date
    Sep 2012
    Posts
    2

    Default Fake AP + DNS Spoof

    Hi, this is my first post.

    I have been playing around with Fake AP + DNSSpoofing trying to learn how it works. But i'm having a problem.

    I start the Fake AP, unencrypted and started dhcpd3 server. Clients can connect fine, the i run

    Code:
    dnsspoof -i at0
    , all works fine and clients are redirect to local apache server.


    At this point clients can't browse the internet because no ip tables have been set.

    so when i set ip tables like this:

    Code:
    iptables --table nat --append POSTROUTING --out-interface wlan0 -j MASQUERADE
    Clients can navigate internet through eth0 , dnsspoof prints dns requests but they are no longer redirected.


    I can't figure out what is happening.

    My configuration is BT 5 64. Intel wifi (wlan0) Wired interface connected to the net. (eth0).

    Thanks

  2. #2
    Senior Member VulpiArgenti's Avatar
    Join Date
    Sep 2011
    Location
    lost
    Posts
    174

    Default Re: Fake AP + DNS Spoof

    I don't think you can have it both ways with this simple set-up. You can't spoof everything to your apache server, and forward them to the internet; it's one or the other. You could try selective dnsspoofing, or more complex iptables rules (read PwnSTAR script for some ideas).

  3. #3
    Just burned his ISO
    Join Date
    Sep 2012
    Posts
    2

    Default Re: Fake AP + DNS Spoof

    Hi,
    thanks for your reply.

    I know that i cannot spoof and redirect at same time.

    The problem is that when i set the packet forward (ip tables and "echo 1 > /proc/sys/net/ipv4/ip_forward" to reach internet no more dns request are spoofed but dnsspoof still printing out that the request has been spoofed.

    Then i stop packet forwarding, and all dns request are spoofed again.

    I dont know why is happening.

Similar Threads

  1. New Ghost Phisher (Fake DNS, Fake HTTP e.t.c)
    By savioboyz in forum Experts Forum
    Replies: 51
    Last Post: 05-08-2011, 06:38 PM
  2. DNS Spoof
    By letmein in forum Beginners Forum
    Replies: 5
    Last Post: 04-11-2011, 05:24 PM
  3. Replies: 5
    Last Post: 04-03-2011, 01:54 PM
  4. Can you ARP spoof to much?
    By imported_vvpalin in forum OLD Newbie Area
    Replies: 1
    Last Post: 05-13-2009, 03:34 PM
  5. ap spoof
    By 7ELEVEN in forum OLD Wireless
    Replies: 4
    Last Post: 11-26-2008, 03:22 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •