As I understand after a Domain Name is resolved to a specefic IP through DNS www.example.com
resolves to 10.10.10.10
, this cache is saved in RAM in a computer for a little bit, AKA five or so minutes. (Note: Correct me if I'm wrong)
So, when I DNS spoof a computer to resolve www.whatevs.com
to the IP of my website clone running on my local apache server: 192.168.1.5 . Then it does what it does and it is finished. But, the problem is after the attack is finished and I stop DNSSpoofing, the computer saves www.whatevs.com
to 192.168.1.5
for a little while after, before it runs a DNS resolution lookup again to resolve the real IP. Does anyone know how to stop this by making the computer lose the cache, or forget www.whatevs.com'
s fake IP address, so it must re-resolve it? Thanks!