Hak5 Packet Squirrel: DNS-Spoofing Demo
Summary
The purpose of this demonstration is to perform a DNS spoofing attack using the Hak5 Packet Squirrel to redirect a target device to a cloned malicious website. This attack aims to capture user credentials by presenting a fake login page that mimics a legitimate website.
Requirements
- Packet Squirrel from Hak5
- target device (Laptop, virtual machine: Ubuntu)
- Network (WLAN-Router)
- Two Ethernet Cable
- One USB Cable to supply Packet Squirrel with power
Setup
- Connect the LAN port of the router to the Ethernet OUT port of the Packet Squirrel
- Connect the target device (laptop) to the Ethernet IN port of the Packet Squirrel
Packet Squirrel Initalization
1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).
2. On the virtual Machine (VM), go to Settings > Network and select Adapter1.
- Set the network adapter to Bridge Mode.
- Choose USB Realtek USB Gbe Family Controller for DHCP to assign an IP automatically.
3. Save the configuration and start the VM.
Verify Connection
1. In the Ubuntu VM, check the IP address assigned to enp0s3 (e.g., 172.16.32.181/24), ensuring it matches the Packet Squirrel subnet (172.16.32.0/24).
2. Test communication by pinging the Packet Squirrel’s default gateway (172.16.32.1).
3. Establish an SSH connection to the Packet Squirrel:
* ssh root@172.16.32.1 * Password: hak5squirrel
Packet Squirrel Initalization
1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).
2. On the virtual Machine (VM), go to Settings > Network and select Adapter1.
- Set the network adapter to Bridge Mode.
- Choose USB Realtek USB Gbe Family Controller for DHCP to assign an IP automatically.
3. Save the configuration and start the VM.
Verify Connection
1. In the Ubuntu VM, check the IP address assigned to enp0s3 (e.g., 172.16.32.181/24), ensuring it matches the Packet Squirrel subnet (172.16.32.0/24).
2. Test communication by pinging the Packet Squirrel’s default gateway (172.16.32.1).
3. Establish an SSH connection to the Packet Squirrel:
* ssh root@172.16.32.1 * Password: hak5squirrel
Used Hardware
Device to be used with this documentation Maybe another device to be used with this documentation
To carry out a DNS spoofin g attack using the man-in-the-middle tool, Packet Squirrle, a web server is set up using setoolkit.
Courses
- A course where this documentation was used (2017, 2018)
- Another one (2018)