Monday, May 11, 2009

DNS Spoof Virutal Hosts

DNS Spoofing is a type of MITM attack in which victim's computer is sent a fake DNS reply for a particular website,forcing his machine to visit a different site.But when this Spoofed IP is hosting multiple virtual sites with multiple Host Headers and attacker wants to use this IP as a fake DNS reply for DNS Spoofing then the server will not be able to determine the proper destination as Host Header will be missing in the request.Hence DNS Spoofing attack will not success.

In this video , Ettercap is combined with a C program to change the host header on the fly and submits a new get request to the web server, which allows an attacker to successfully launch DNS Spoofing attack with a IP hosting multiple virtual web sites.

More info can be found here.
Bookmark and Share
Posted by Cybexin at 5/11/2009 02:40:00 AM 0 comments
Labels: , , , ,

Saturday, May 9, 2009

Attacking Oracle with the Metasploit Framework

Bookmark and Share
Posted by Cybexin at 5/09/2009 09:10:00 AM 0 comments
Labels: , , , , ,

Wednesday, May 6, 2009

Auditing Anti-Virus Configuration and Installation with Nessus 3

Bookmark and Share
Posted by Cybexin at 5/06/2009 03:07:00 AM 0 comments
Labels: , , , ,

Tuesday, May 5, 2009

Exploiting XP with SAINT

Bookmark and Share
Posted by Cybexin at 5/05/2009 08:13:00 AM 0 comments
Labels: , , , , , , ,

Monday, May 4, 2009

Exploiting Windows Vista with Core Impact 8

Bookmark and Share
Posted by Cybexin at 5/04/2009 08:51:00 AM 0 comments
Labels: , , , , ,
Subscribe to: Posts (Atom)