dns2proxy – Offensive DNS server
dns2proxy is an offensive DNS server that offers various features for post-exploitation once you’ve changed the DNS server of a victim. It’s very frequently used in combination with sslstrip . Features Traditional DNS Spoofing Implements DNS Spoofing via Forwarding Detects and corrects changes for sslstrip to work Usage Using the spoof.cfg config file with the format: 1 hostname ip . ip . ip . ip 1 2 3 4 5 6 7 8 9 10 11 12 root @ kali : ~ / dns2proxy # echo "www.s21sec.com 1.1.1.1" > spoof.cfg // launch in another terminal dns2proxy.py root @ kali : ~ / dns2proxy # nslookup www.s21sec.com 127.0.0.1 Server : 127.0.0.1 Address : 127.0.0.1 #53 Name : www . s21sec . com Address : 1.1.1.1 Name : www . s21sec . com Address : 88.84.64.30 Or you can use domains.cfg file to spoof all hosts of a domain (wildcard): 1 2 3 4 5 6 7 8 9 root @ kali : ~ / demoBH / dns2proxy # cat dominios.cfg . domain . com 192.168.1.1 root @ kali : ~ ...