Hak5 Packet Squirrel: DNS-Spoofing Demo

Summary

The purpose of this demonstration is to perform a DNS spoofing attack using the Hak5 Packet Squirrel to redirect a target device to a cloned malicious website. This attack aims to capture user credentials by presenting a fake login page that mimics a legitimate website.

Requirements

• Packet Squirrel from Hak5
• target device (Laptop, virtual machine: Ubuntu)
• Network (WLAN-Router)
• Two Ethernet Cable
• One USB Cable to supply Packet Squirrel with power

Setup

• Connect the LAN port of the router to the Ethernet OUT port of the Packet Squirrel
• Connect the target device (laptop) to the Ethernet IN port of the Packet Squirrel

Packet Squirrel Initalization

1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).

2. On the virtual Machine (VM), go to Settings > Network and select Adapter1.

• Set the network adapter to Bridge Mode.
• Choose USB Realtek USB Gbe Family Controller for DHCP to assign an IP automatically.

3. Save the configuration and start the VM.

Description

In order to do a MITM-Attack with the Packet Squirrel, a Webserver is needed and also

Step 1

Enter these commands in the shell

echo foo
echo bar

Step 2

Make sure to read

• War and Peace
• Lord of the Rings
• The Baroque Cycle

Used Hardware

Device to be used with this documentation Maybe another device to be used with this documentation

To carry out a DNS spoofin g attack using the man-in-the-middle tool, Packet Squirrle, a web server is set up using setoolkit.

Courses

• A course where this documentation was used (2017, 2018)
• Another one (2018)

References

• https://wikipedia.org
• https://google.com