DNS Spoofing Attacks

Download Our CCNA (200-301) Practice Exam for FREE
***********************************

In this video, you'll see how an attacker might launch a DNS Spoofing attack against your network, and we'll discuss how to defend yourself. For example, an attacker might launch a DHCP Spoofing attack, convincing your computer to use the attacker's DHCP server. Their DHCP server could direct your computer to use their DNS server, which might redirect your computer to a malicious site that looks like one of your regularly visited sites (e.g., your bank or e-commerce site). When you enter your login credentials or credit card information into that fake site, the attacker then has your information.

DNS Spoofing is a topic on the Certified Ethical Hacker (CEH) exam blueprint, but it's also valuable to know for defending your real-world network.

The defense strategies for a DNS Spoofing attack are similar to those used to defend against a DHCP Spoofing attack, which we demonstrated in a previous video.

To watch that video, "DHCP Attacks and Defense Strategies," please check out the following link:

NOTE: This channel does not endorse or encourage malicious or illegal activity using hacking tools.

=====================================================
Don't miss a single one of Kevin's YouTube videos. Subscribe here:
=====================================================

=====================================================
Kevin Wallace, CCIEx2 #7945 Emeritus (Collaboration and R&S)
=====================================================

=====================================================
If you enjoyed this video, here is the video title and also the link for you to share:
DNS Spoofing Attacks
=====================================================

[Whysoserious--]

Love the clarity in the way you break things down. I hope your channel grows bigger

[SecurityLessons]

It's great, that you say no word about how the attack really works

[awuolantonio]

It always a pleasure to learn more hope u will continue teaching

[andrewchukwudumeje]

Hi thanks for this very educative video
Much appreciated

But the attack does not work
I have two systems which i attempted to use to run this attack
one runs Kali Linux as the main Operating system (Attacking device)
And the other one runs Windows 10 as the main OS (Victim device)

i followed all the steps but the ARP poisoning did not work

Please how to i resolve this??

[leninanciani]

Very good video, but I did exactly what you do in this video but Kali didn’t do dns spoofing, when I tried to access the website, the browser keeps thinking or buffering but didn’t send the traffic to my IP, if you know why this happened please let me know, thanks

[simplekindofman]

Just to be clear, you have to be on the same network for this to work?

[fzduwtm]

perfect job. my apache2 is working only into my virtual machine, how to solve this problem?

[ahmedashraf]

it does not work for me, I did exactly what you did. I have been watching youtube tutorials and nothing works.

[zyphex]

sir, can i follow your network+ videos to learn about networkin ?

[futuresystemsbvba]

All true but depricated, do ya know the root is gone, as the dns here is forwatd lookups nut once the IP you need to go to that via route-d, since the 13 root servers are only gone, the US has splited the globall INET as APNIC, ARIN, ICANN, IANA, all is replaced by only the ROOT in US, so,
when the root doesn't has glue Soa and NS values, then the use off BIND is gone, so the tree can manipulate simple the DNS records by setting a TL off 10, once inside that hop you are sizzled inside a sandbox that reroute back and makes a IPINIP PIPE launches a exec DNS over RPC and now the MITM is the man inside the system
try dig .* ; and then make it with a |, the DNS local returns devices or other stuff on that pipe