DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP...

6
DNS Spoofing

Transcript of DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP...

Page 1: DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP Spoofing 192.168.0.2.

DNS Spoofing

Page 2: DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP Spoofing 192.168.0.2.

Step 5.hosts file :

xxx.xxx.xxx.xxxwww.google.com.tw

Step 1.ARP Spoofing

192.168.0.2 is at 192.168.0.128

Step 2.www.ncu.edu.t

w

Step 3.forward

Step 4.www.google.com.

tw

Step 6.forward

Page 3: DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP Spoofing 192.168.0.2.

DNS Operation

Page 4: DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP Spoofing 192.168.0.2.

Step 1.www.google.com.tw ?

Step 2.????????

?

Step 3.www.google.com.t

w ?

Step 4.www.google.com.t

w = 74.125.153.103

Step 5.cache update

Step 6.www.google.com.tw =

74.125.153.103

Step 7.

Page 5: DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP Spoofing 192.168.0.2.

DNS Cache Poisoning

Page 6: DNS Spoofing. Step 5. hosts file : xxx.xxx.xxx.xxx Step 5. hosts file : xxx.xxx.xxx.xxx Step 1. ARP Spoofing 192.168.0.2.

Step 1.www.google.com.tw ?

Step 2.????????

?

Step 3.www.google.com.t

w ?

Step 6.www.google.com.t

w = 74.125.153.103

Step 5.match ?

www.google.com.tw=140.115.17.37

Step 4.XID = 1234

Step 4.XID = 12345

Step 4.XID = 8888

Step 3.XID = 8888

Step 7.

Step 4.XID = 123