From the course: Certified Ethical Hacker (CEH)

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Performing DNS poisoning

Performing DNS poisoning

From the course: Certified Ethical Hacker (CEH)

Start my 1-month free trial Buy for my team

Performing DNS poisoning

“

- As we've discussed previously, domain name system is used for mapping an IP address to a host name. So if I want to talk to www.google.com, my computer needs an IP address to talk to. What if we can manipulate the responses from DNS servers? We can. There are tools out there that can do that. They usually, however, rely upon the ability to see the traffic at a Layer 2 level. So in this example right here, we have Host A wants to talk to bank.com. In order for this to occur, the host needs to send a request to a DNS server saying, what is the IP address for bank.com? In order to pull this off, our attacker needs to see the request go towards the DNS server. And then we need to race to provide a response. This is all about who is faster. Given that we are most likely millisecond adjacent to this host, we can probably send a DNS reply, spoofing the original request response from the DNS server and then Host A will most likely trust it, provided we've been able to successfully spoof…

Contents