Hak5 Packet Squirrel: DNS-Spoofing Demo - Revision history

VKrennwallner: /* Summary */

2024-12-18T17:04:50Z

Summary

← Older revision		Revision as of 17:04, 18 December 2024
Line 1:		Line 1:
	== Summary ==		== Summary ==

	~~The purpose of this~~ demonstration ~~is to perform~~ a DNS spoofing attack using the Hak5 Packet Squirrel ~~to redirect a~~ target device to a cloned ~~malicious website~~. ~~This attack aims to capture user~~ credentials by ~~presenting a fake login page that mimics a legitimate website~~.		This demonstration illustrates a Man-in-the-Middle (MITM) DNS spoofing attack using the Hak5 Packet Squirrel. By intercepting and altering DNS requests, the Packet Squirrel redirects the target device to a malicious, cloned version of www.google.com. When the victim enters their credentials, these are captured by the attacker for potential exploitation.

			Key Learning Points:

			* The importance of securing DNS communication against spoofing.

			* Understanding how tools like the Packet Squirrel and SET can be used for penetration testing.

			* Recognizing the need for HTTPS and DNSSEC to protect sensitive user data

	== Requirements ==		== Requirements ==

2024-12-18T17:03:49Z

Step 3: Execute the Attack

← Older revision		Revision as of 17:03, 18 December 2024
Line 109:		Line 109:
	4. The attacker can now view the captured credentials in the SET interface.		4. The attacker can now view the captured credentials in the SET interface.

	[[File:squirrelsignin.png\|~~400px~~\|thumb\|left\|]]		[[File:squirrelsignin.png\|500px\|thumb\|left\|]]

	== Used Hardware ==		== Used Hardware ==

2024-12-18T17:03:33Z

Requirements

← Older revision		Revision as of 17:03, 18 December 2024
Line 5:		Line 5:
	== Requirements ==		== Requirements ==

	[[File:setupsquirrel.png\|~~250px~~\|thumb\|right\|]]		[[File:setupsquirrel.png\|300px\|thumb\|right\|]]

	* Packet Squirrel from Hak5		* Packet Squirrel from Hak5

2024-12-18T17:03:22Z

Packet Squirrel Initalization

← Older revision		Revision as of 17:03, 18 December 2024
Line 20:		Line 20:
	== Packet Squirrel Initalization ==		== Packet Squirrel Initalization ==

	[[File:squirrelubuntu.png\|~~250px~~\|thumb\|right\|]]		[[File:squirrelubuntu.png\|300px\|thumb\|right\|]]

	1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).		1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).

2024-12-18T17:03:13Z

Verify Connection

← Older revision		Revision as of 17:03, 18 December 2024
Line 31:		Line 31:
	== Verify Connection ==		== Verify Connection ==

	[[File:squirrelssh.jpg\|~~250px~~\|thumb\|right\|]]		[[File:squirrelssh.jpg\|300px\|thumb\|right\|]]

	1. In the Ubuntu VM, check the IP address assigned to enp0s3 (e.g., 172.16.32.181/24), ensuring it matches the Packet Squirrel subnet (172.16.32.0/24).		1. In the Ubuntu VM, check the IP address assigned to enp0s3 (e.g., 172.16.32.181/24), ensuring it matches the Packet Squirrel subnet (172.16.32.0/24).

2024-12-18T16:57:29Z

Step 1: Web Server Setup

← Older revision		Revision as of 16:57, 18 December 2024
Line 51:		Line 51:
	* In Settings > Network, set Adapter 2 to Bridge Mode and choose Intel Wi-Fi 6E AX211 160MHz for DHCP.		* In Settings > Network, set Adapter 2 to Bridge Mode and choose Intel Wi-Fi 6E AX211 160MHz for DHCP.

	* Restart the VM and verify the IP address assigned to enp0s8 (e.g., 192.168.1.16).		* Restart the VM and verify the IP address assigned to enp0s8 (e.g., 192.168.1.26).

	2. Install and set up the Social-Engineer Toolkit (SET):		2. Install and set up the Social-Engineer Toolkit (SET):
Line 76:		Line 76:
	4. Web Templates		4. Web Templates

	* Enter the POST back IP address (192.168.1.16).		* Enter the POST back IP address (192.168.1.26).

	* Choose Google as the website to clone.		* Choose Google as the website to clone.

2024-12-18T16:57:14Z

Step 2: Configure DNS Spoofing on Packet Squirrel

← Older revision		Revision as of 16:57, 18 December 2024
Line 89:		Line 89:
	2. Modify the spoofhost file to include the following entry:		2. Modify the spoofhost file to include the following entry:

	www.google.com 192.168.1.16		www.google.com 192.168.1.26

	This redirects requests to www.google.com to the cloned website hosted on the web server (IP: 192.168.1.16).		This redirects requests to www.google.com to the cloned website hosted on the web server (IP: 192.168.1.26).

	3. Save the changes and exit.		3. Save the changes and exit.

2024-12-18T16:55:58Z

Verify Connection

← Older revision		Revision as of 16:55, 18 December 2024
Line 30:		Line 30:

	== Verify Connection ==		== Verify Connection ==

			[[File:squirrelssh.jpg\|250px\|thumb\|right\|]]

	1. In the Ubuntu VM, check the IP address assigned to enp0s3 (e.g., 172.16.32.181/24), ensuring it matches the Packet Squirrel subnet (172.16.32.0/24).		1. In the Ubuntu VM, check the IP address assigned to enp0s3 (e.g., 172.16.32.181/24), ensuring it matches the Packet Squirrel subnet (172.16.32.0/24).

Line 37:		Line 40:
	ssh root@172.16.32.1		ssh root@172.16.32.1
	Password: hak5squirrel		Password: hak5squirrel

	~~[[File:squirrelssh.jpg\|250px\|thumb\|right\|]]~~

	== Step 1: Web Server Setup ==		== Step 1: Web Server Setup ==

2024-12-18T16:55:43Z

Packet Squirrel Initalization

← Older revision		Revision as of 16:55, 18 December 2024
Line 19:		Line 19:

	== Packet Squirrel Initalization ==		== Packet Squirrel Initalization ==

			[[File:squirrelubuntu.png\|250px\|thumb\|right\|]]

	1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).		1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).

Line 25:		Line 28:
	* Choose USB Realtek USB Gbe Family Controller for DHCP to assign an IP automatically.		* Choose USB Realtek USB Gbe Family Controller for DHCP to assign an IP automatically.
	3. Save the configuration and start the VM.		3. Save the configuration and start the VM.

	~~[[File:squirrelubuntu.png\|250px\|thumb\|right\|]]~~

	== Verify Connection ==		== Verify Connection ==

2024-12-18T16:55:29Z

Requirements

← Older revision		Revision as of 16:55, 18 December 2024
Line 4:		Line 4:

	== Requirements ==		== Requirements ==

			[[File:setupsquirrel.png\|250px\|thumb\|right\|]]

	* Packet Squirrel from Hak5		* Packet Squirrel from Hak5
Line 10:		Line 12:
	* Two Ethernet Cable		* Two Ethernet Cable
	* One USB Cable to supply Packet Squirrel with power		* One USB Cable to supply Packet Squirrel with power
	~~[[File:setupsquirrel.png\|250px\|thumb\|right\|]]~~

	== Setup ==		== Setup ==