Hak5 Packet Squirrel: DNS-Spoofing Demo
Summary
The purpose of this demonstration is to perform a DNS spoofing attack using the Hak5 Packet Squirrel to redirect a target device to a cloned malicious website. This attack aims to capture user credentials by presenting a fake login page that mimics a legitimate website.
Requirements
- Packet Squirrel from Hak5
- target device (Laptop, virtual machine: Ubuntu)
- Network (WLAN-Router)
- Two Ethernet Cable
- One USB Cable to supply Packet Squirrel with power
Setup
- Connect the LAN port of the router to the Ethernet OUT port of the Packet Squirrel
- Connect the target device (laptop) to the Ethernet IN port of the Packet Squirrel
Packet Squirrel Initalization
1. Set the Packet Squirrel to Arming Mode (switch to the far-right position).
2. On the virtual Machine (VM), go to Settings > Network and select Adapter1.
- Set the network adapter to Bridge Mode.
- Choose USB Realtek USB Gbe Family Controller for DHCP to assign an IP automatically.
3. Save the configuration and start the VM.
Description
In order to do a MITM-Attack with the Packet Squirrel, a Webserver is needed and also
Step 1
Enter these commands in the shell
echo foo echo bar
Step 2
Make sure to read
- War and Peace
- Lord of the Rings
- The Baroque Cycle
Used Hardware
Device to be used with this documentation Maybe another device to be used with this documentation
To carry out a DNS spoofin g attack using the man-in-the-middle tool, Packet Squirrle, a web server is set up using setoolkit.
Courses
- A course where this documentation was used (2017, 2018)
- Another one (2018)