[Autogenerated] Let's now take a look at an attack against data
integrity by _________ a user's browsing session.
DNS is the phone directory of the internet.
If a user wants to access google dot com,
for example,
the browser starts a series of checks first to see
if it's the intended destination.
Then to see if the destination is identified in a locally stored hosts file.
And if not it sends a query to a DNS server.
The DNS server then replies with the I.
P.
Address of where to find google dot com,
which allows the client to identify where on the internet google dot com is.
There's a lot of trust in this exchange because DNS
queries are unencrypted and the client accepts the
response it receives without question.
Let's look at how we can _____ that trust.
If we can convince a client to connect to a rogue
access point that we've created.
We can intercept all DNS queries sent by that client.
We can then respond with whatever address we want and direct the
victim to a malicious website under our control.
It's worth noting the difference between DNS spoofing in wired
and wireless networks in a wireless network,
we need to socially engineer a victim to connect to
our rogue access point After that.
The attack is pretty straightforward.
In a wired network we'd have to carry out an ARP spoofing
attack to impersonate the access point so that all network
traffic was routed through our device.
We could then intercept the DNS query and spoof the reply.
So how could we do this In practice,
we need to start by spinning up our own access point,
the now familiar free wifi network,
we specified W LAN zero as the wireless site to which the victim connects
and F zero as the wide site that provides a route through to the internet
or to a locally hosted malicious website.
We then create a hosts file which redirects DNS queries for
google dot com to a locally hosted web server.
Next we can spin up a local web server using Python In this example,
we assume that the landing page for the fake website is hosted in the
directory in which we launched the python web server.
Finally,
we launched the spoofing attack using DNS spoof
specifying the rogue access points,
tap into face a P zero with and the host file with.
Now any DNS queries issued by the victim will be intercepted by the rogue
access point and if there's a match in the host file,
the victim's browser will be redirected to our site.
All other requests will be forwarded by the rogue
access point to the intended destination