EvilZone

Hacking and Security => Hacking and Security => : 10r03r December 28, 2013, 06:28:09 PM

: Surely ARP Poisoning
: 10r03r December 28, 2013, 06:28:09 PM
Hi there,

I have a web server in my network, how can I redirect all request that is going to that web server back to my box. I mean if others try to connect to that web server, instead connect to my box apache server.  ???

Thanks you all.
: Re: Maybe ARP Poisoning
: proxx December 28, 2013, 08:24:33 PM
Wow you are clueless.
Study some TCP/IP and come back in 3 months, than we talk.
: Re: Maybe ARP Poisoning
: Phage December 28, 2013, 09:01:11 PM
There are many ways of doing this and a simple Google search would have given you loads of links to guides and articles about this.
: Re: Maybe ARP Poisoning
: 10r03r December 29, 2013, 07:29:20 AM
Wow you are clueless.
Study some TCP/IP and come back in 3 months, than we talk.

Thanks for reply Proxx,

I know it's simple stuff and I already have CCNA and I'm good with Networking, but I had to make sure.
I know it all the way, arpspoofing for poisinning and iptables to redirect all dst traffic to webserver back to my box, and rest of traffic to gateway.

But as I told you I wanted to know what is the best possible way.


There are many ways of doing this and a simple Google search would have given you loads of links to guides and articles about this.
Thanks.

Staff note: I have now edited the posts for you, but please don't double post.
: Re: Maybe ARP Poisoning
: proxx December 29, 2013, 12:35:56 PM
Thanks for reply Proxx,

I know it's simple stuff and I already have CCNA and I'm good with Networking, but I had to make sure.
I know it all the way, arpspoofing for poisinning and iptables to redirect all dst traffic to webserver back to my box, and rest of traffic to gateway.

But as I told you I wanted to know what is the best possible way.

Thanks.

Staff note: I have now edited the posts for you, but please don't double post.

Well in that case I am very suprised you suggest arp poisoning, even though that would be belong to the list of options , I would put that at the bottom.
And instead of having that traffic go to that box in the first place why not the other way around ?
>>   -------- >>>> --------->>
host            box1             server
With IPtables you can make such a forward.

Which also raises another question , why on earth would you want to do that?
Am I correct that you want to sniff or inject traffic ?
You really have to give a little more detail.

: Re: Maybe ARP Poisoning
: 10r03r December 29, 2013, 03:52:31 PM
Well in that case I am very suprised you suggest arp poisoning, even though that would be belong to the list of options , I would put that at the bottom.
And instead of having that traffic go to that box in the first place why not the other way around ?
>>   -------- >>>> --------->>
host            box1             server
With IPtables you can make such a forward.

Which also raises another question , why on earth would you want to do that?
Am I correct that you want to sniff or inject traffic ?
You really have to give a little more detail.

Hi, that's why I asked for your opinion.

Actually I want to Phish. I want all clients see the same page (first page is login page) on my box.

Please let me what you would do?
: Re: Maybe ARP Poisoning
: proxx December 29, 2013, 06:04:54 PM
Hi, that's why I asked for your opinion.

Actually I want to Phish. I want all clients see the same page (first page is login page) on my box.

Please let me what you would do?

Well since you ask so nicely, DNS spoofing would do the trick.
Just forge the requests, key is to be faster than the real DNS server.
Also this is not very intrusive and difficult to detect.
: Re: Maybe ARP Poisoning
: 10r03r December 29, 2013, 09:20:05 PM
Well since you ask so nicely, DNS spoofing would do the trick.
Just forge the requests, key is to be faster than the real DNS server.
Also this is not very intrusive and difficult to detect.

Mission Accomplished with ARP Poisoning (Took only 10 seconds)  :o
Took me few months to get access to this network, I had to do it in minutes, that was why I asked the question, anyway took shorter that I thought.  :D
Appreciate your time Proxx.