How to get the user name and password of Facebook with DNS spoofing ?
DO THIS ONLY FOR EDUCATIONAL PURPOSE











That's it now see the details that comes out in ettercap.
DNSspoofing with Ettercap dns spoof.
Ettercap stands for Ethernet Capture.
Ettercap is a comprehensive suite for man in the middle attacks.
It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis.
Here i am going to show you how to spoof dns with ettercap dnsspoof but this will only work in internal network.
First need to install ettercap:
sudo apt-get install ettercap-dbg ettercap-common
now find the the etter.dns file and edit it . To locate the file write
locate etter.dns

now edit the file and write the spacific website name that you want to spoof.
Like I am going to use facebook and the ip of server (your ip).
nano /etc/ettercap/etter.dns
Now run the setoolkit....
select the options...
1) Social Engineering attack > 2) WebSite Attack Vectors > 3) Creditials Harvestor > 1) Web Template write the ip address and then > 4) facebook
Its working on port 80.
As earlier we have write the web site In the etter.dns file so now we have to run the ettercap.
ettercap -G
Click the optin Sniff and then Unified sniffing
Click Plugins and the double click the dns_spoof make sure that * appears.
Click the option Host and then scan the host . After scanning see the Host list.
Next ARP poisoning and then only tick the first option.
Strat sniffing and wait for someone to access facebook .
That's it now see the details that comes out in ettercap.
Comments
Post a Comment