2

The question is not professional, but what I'm trying to say is...

Is there any way to inject or force the DNS server to attach/change an IP address for some site. For example, I'm running an apache on my machine and I have my sniffing website on it. I'd like to know how to attack the DNS which is going through port 53 on my gateway, so it will change the IP address for www.example.com to my local IP address and everyone from the local network that I'm connected to will be redirected to my machine when they type www.example.com

I'm not asking for every step of this attack, just some info and maybe the name of attack like this.

Improve this question

1 Answer 1

Reset to default
4

Kaminsky attack is a technique with which you can flood the DNS recursive server (like your gateway) with DNS replies that ultimately match the response that the recursive server is originally looking for. This is also called DNS cache poisoning.

An alternate technique would be to ARP-spoof your IP as the gateway and let everyone make the DNS query to a DNS server running on your machine. Your rogue DNS server can then reply with the forged DNS records.

Improve this answer
2
  • Thank you so much! That was exactly what I wanted to know :)
    – Dawid Zbiński
    Nov 4, 2014 at 22:36
  • Well done on you're answer, could not had put it better.
    – Cameron Does Things
    Nov 5, 2014 at 4:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .