Collaborate Disseminate
When I try to perform DNS spoof attack using ettercap (and bettercap) it fails. The browser does not redirect to the page I wanted (e.g. 192.168.7.1) and it goes to the original page (e.g. YouTube.com).
Do you know why it happens and if th… Continue reading Dns spoof failure [closed]
I am practicing in these attacks and countermeasures.
I did attack against a computer and it works. I did it against a bridged-network guest VM machine and it does not work. I’m curious about why.
As you can see I receive multiple response… Continue reading DNS Spoofing attack works in host machine but does not work in guest VM machine. I’m curious about why
What protections does TLS use in the above scenario?
In the picture, the client asks the attacker for the address of Google.com, but the attacker gives them a different ip address which redirects to a domain that looks like Google.com.
… Continue reading Understanding TLS Protections Against DNS Spoofing and Fake Websites
I have a dns spoofing caplet and sometimes it works and sometimes it does not work,
The caplet
I am on a VM and I’m using a WiFi adapter so it is not a problem. I tried it on my phone and it worked for sometime but after that it did not w… Continue reading sometime dns spoofing works but other time not? [closed]
I am trying to spoof example.com by Bettercap
I ran
sudo bettercap -iface wlan0
net.probe on
net.show
set dns.spoof.domains example.com
set dns.spoof.address 192.168.1.145
dns.spoof on
set arp.spoof.targets 192.168.1.145
arp.spoof on
net.s… Continue reading dns spoof does not redirect example website to target website. MiTM bettercap; [closed]
I was wondering if we push our DNS over the VPN and basically let them do DNS resolution, is it possible to perform DNS poisoning and man in the middle attack on us?
I know browsers check certificates but is there any other security layer … Continue reading can a VPN provider do DNS poisoning?
When a Windows computer wants to resolve a domain name, it offloads the request to a DNS resolver and tells the resolver that it wants to resolve with DNSSEC (by setting the ‘DO’ bit in the query). The DNS resolver will use DNSSEC and will… Continue reading DNSSEC Client Validation – The Last Mile in DNSSEC
A benefit to password managers, at least some of them, is that they can look at the URL and only use autotype/autofill when on the correct site, which can help prevent pharming since if instead of https://www.example.com/ you go to examp1e… Continue reading DNS hijacking/poisoning effect on URL/URI and password manager autotype/autofill
I would like to be able to switch back and forth between the real DNS and maybe setting a local DNS entry so I can manipulate AJAX responses for code security checks.
For instance if the server responds with Ajax on page 1 that page 2 is n… Continue reading How can I manipulate certain server side responses? Specifically Ajax Responses? XXE Attack? Hybrid DNS Resolution?
I can regularly observe TLS 1.3 secured website duplications. The attacker indicates its presence by slight modifications on the web page. In particular I obseved this on the two following web pages:
https://en.wikipedia.org/wiki/Henry_Kis… Continue reading Can you guys help me on my decentralized and non-pyramidal DNS PKI secured with Wireguard and gnupg open source project?