Welcome back. Let's take a look at the
unicycle. So do you miss protocol is actually
used to resolve the IP address of the host names?
In this particular attack scenario, the attacker main
intent is to update the DNS entries on
the servers in such a way. It always gets
resolved to malicious website or fishing
scenarios, hence. These are commonly found
under fishing and farming attacks. The
attacker is planning to compromise either
the local DNS entries on the machine or
the router itself in such a
way that the entries are
Hated to 50s.
The next common attack Vector is Amanda middle and
last week setting up through bso's. Now.
Let's take a simple example.
You don't have to do. So, what I'm going to do is that we
will open up the hose pipe that is available on
your Windows system 32 drivers and
it is a folder. The same file is
also available on Linux. The /. It
is a folder.
Once we open this file, we see that there are
no entries made. So, in order to do so, we
just need to enter the IP.
So, this is the IP address where the fishing
website will be posted followed by what
is the need that we are planning to resolve. So, in my
scenario, let's create a fake entry.
And we just save this file.
So, the speaking of scenario stranded fishing, where
an attacker sends out messages, to all the victims saying
that, hey, there is a new movie available on
Netflix, and each is gives out this link. So,
as the victim 1C, accesses the particular site.
We see a fake login page.
So this is one such scenario that can be achieved to
retake the scenario where we have, an victim
was actually trying to access a URL and
that vehicle list. Updating the DNS entries
in such a way that the actual
legitimate website is not available. But
backpack curse, own
free website is the one which the victim
visits and Mission scenario. You
can gather since give informations.
That's it for this video. Thank you.