Sinisterly
Ettercap dns-spoof? - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Computers (https://sinister.li/Forum-Computers)
+--- Forum: Operating Systems (https://sinister.li/Forum-Operating-Systems)
+--- Thread: Ettercap dns-spoof? (/Thread-Ettercap-dns-spoof)

Ettercap dns-spoof? - Hacked - 12-01-2012

Hello.
How do you use the dns-spoof plugin in ettercap? I edit the file so it says
Code:
www.facebook.* A "ip of google"
. Then on the command line I type
Code:
ettercap -T -q -M ARP -P dns-spoof // //
What I expect to happen is that when someone goes into facebook they should be redirected to google but instaed they don'g have any internet att all. If i change google's ip to my ip in etter.dns and i have a server running it works sometimes. My question is, why is this happening?

RE: Ettercap dns-spoof? - Shodan - 12-04-2012

Code:
sudo nano /usr/share/ettercap/etter.dns
Thats used to edit the file ^
scroll down using the arrow keys untill we find something that says # microsoft sucks Wink.# Redirect it to http://www.linux.org.

Where is says "google.com A ip" yours will probably say microsoft.com,replace all the places where it says microsoft with google.com and after A enter your victims ip address.



Also the * goes at the front of the domain not after.It should look like this
*www.facebook.com

Code:
Then use this ettercap -T -q -i wlan0 -P dns_spoof -M arp // //

Also replace the wlan0 with whatever you are using,It could be eth0.
Just use ifconfig and see.

RE: Ettercap dns-spoof? - Hacked - 12-09-2012

Thank you! I will try when I come home. Is there a way to reset etter.dns? A tutorial i watched said that I should empty the whole file.