Wednesday, 19 February 2014

Wi-Fi Pineapple DNS Spoof

DNSSpoof

Introduction

DNSSpoof allows you Pineapple to reroute requests for websites to a particular IP address.
So dumbing it down again, when you type a website name into your browser DNS is used to resolve the IP of the webserver that is hosting the website you are looking for. One example would be using command prompt to ping a website.


In a windows environment the first place that will be checked is
C:\Windows\System32\drivers\etc\hosts
 If you are working within an enterprise environment you can edit this file to resolve a simple name for network devices that do not get published in DNS, like switches.


Editing the host file as shown will redirect requests for google.com

A real world application would be if I had a switch n my network call "switch1" with the IP address of 10.0.0.3 I could edit my host file so that I do not have to keep track of the IP address, handy if you have many switches on an enterprise network.


 
So DNSSpoof will redirect any requests for a website to an IP that you decide.
 

Operation

DNSSpoof is available when you initially set up your Pineapple, so no infusions to install for this application. To state the obvious you first have to enable DNSSpoof.
You can now redirect DNS requests to the pineapple or anywhere else you wish by editing the
if you replace a website name with an asterisk (*) all DNS requests will be forwarded to your chosen IP address.
 
 
As always stay safe remember that this  is not illegal to do any of this on your own equipment or equipment that you have the permission to work on. In the current climate even what we may view as minor mischief can be prosecuted. Please look forward to my next post that will be on the Random Roll infusion.

No comments:

Post a Comment