Questions tagged [dns-spoofing]

DNS Spoofing is a network attack whereby data is introduced into a Domain Name System (DNS) resolver's cache by an attacker that has no authority, causing diverting injected names to redirect traffic to a host controlled by the attacker.

134 questions
2
votes
0 answers

DNS sinkhole usability

Although I know what the use of a DNS sinkhole is (I guess I do) I'm struggling to understanding how well scalable such solution is. DNS sinkhole or black hole DNS is used to spoof DNS servers to prevent resolving host names of specified URLs.…
cyzczy
  • 1,578
  • 5
  • 23
  • 42
1
vote
0 answers

DNS Packet Spoof Scapy

I am looking into local DNS spoofing by sniffing DNS-requests with Scapy, and sending a spoofed packet in response. Here is the code I used: from scapy.all import * def spoof_dns(pkt): if (DNS in pkt and b'facebook.com' in pkt[DNS].qd.qname): …
Nomad
  • 2,369
  • 2
  • 13
  • 23
1
vote
0 answers

Where are the DNS resolvers?

I'm trying to understand the principle behind DNS poisoning attacks. It seems like the DNS Resolver is just a piece of software. Where is this software located, and how is it shared among all the computers on the network? To actually poison a…
Raven
  • 111
  • 1
0
votes
2 answers

What are the types of DNS spoofing?

I saw a post on here about how there are multiple types of DNS spoofing, it said: "DNS spoofing refers to the broad category of attacks that spoof DNS records. There are many different ways to do DNS spoofing: compromise a DNS server, mount a DNS…
User104163
  • 409
  • 2
  • 6
  • 11
-2
votes
1 answer

My internet service provider spying on me?

I have found when I ping "www.google.com" the response is an ip address of my country location, not Google. The strange thing is the site opens normally. Anyone have an explanation?
MR Robot
  • 13
  • 3