National Cyber Warfare Foundation (NCWF) Forums


Tutorial On DNS Cache Poisoning (Redirect abc.com By Entering xyz.com In Address Bar)


0 user ratings
2023-08-20 15:58:29
milo
Red Team (CNA)

 - archive -- 
Hello guys! Today I'm going to post about a hacking technique named "DNS Spoofing or DNS Cache Poisoning". DNS cache poisoning is a computer hacking attack, whereby data is introduced into a Domain Name System (DNS) name server's cache database, causing the name server to return an incorrect IP address, diverting traffic to another computer (often the attacker's).

This trick is commonly used by hackers for redirecting original site to fake site (like opening Facebook, Gmail would open fake facebook, gmail).
DNS Cache Poisoning
Let's understand it by taking an example:
  • Go to C:\Windows\ System32\ Drivers\ etc\ Hosts
  • Open it with notepad.
  • Write 67.195.160.76 www.google.com below 127.0.0.1 localhost like that:
    127.0.0.1 localhost

    67.195.160.76  www.google.com
Where 67.195.160.76 is IP address of yahoo, you can change it whatever you want. If you are thinking about knowing IP address of any site, then go to command prompt> Type ping site name, for e.g. ping www.facebook.com

Note: Even you can use it for phishing purpose.




    Source: Basicsofethicalhacking
    Source Link: http://www.basicsofhacking.com/2014/01/redirect-yahoocom-by-entering-googlecom.html


    Comments
    new comment
    Nobody has commented yet. Will you be the first?
     
    Forum
    Red Team (CNA)



    Copyright 2012 through 2024 - National Cyber Warfare Foundation - All rights reserved worldwide.