Fake Website Problem

Data that travels over the air and how to protect (or decipher) it

Fake Website Problem

Post by DevilMoo on Thu Apr 21, 2016 11:49 am
([msg=92178]see Fake Website Problem[/msg])

Hello!
We know there are people building a fake website to treat others to get their passwords.
In many cases, the URL of the fake websites are wrong.
Consider a scenario with a bank called ABC with website www .ABC. com
I get User A network packet requesting the DNS server for the IP address of the ABC website.
Can I act as DNS server and redirect his/her browser to my website but with the URL, www. ABC. com?
Is it achievable?
DevilMoo
New User
New User
 
Posts: 1
Joined: Thu Apr 21, 2016 10:18 am
Blog: View Blog (0)


Re: Fake Website Problem

Post by cyberdrain on Mon Apr 25, 2016 6:01 pm
([msg=92213]see Re: Fake Website Problem[/msg])

As far as I know spaces are never allowed in websites. If you control the user's DNS you wouldn't need to redirect to the wrong site, just the wrong IP address. Do note that a user might find something amiss if the site is usually using HTTPS but suddenly isn't any more.
Free your mind / Think clearly
User avatar
cyberdrain
Expert
Expert
 
Posts: 2160
Joined: Sun Nov 27, 2011 1:58 pm
Blog: View Blog (0)


Re: Fake Website Problem

Post by tremor77 on Thu May 05, 2016 7:45 pm
([msg=92257]see Re: Fake Website Problem[/msg])

Most people who will fall for fake site phishing are the same people who couldn't tell you what a URL is or even locate it on their screen. The chances they'd even notice lack of SSL or a url that isn't even vaguely close to ABC.com is remote.. and with URL complexity because of web applications even less so.. consider ABC.com's login page my be something like:

abc.com/login.php?mode=somerandomshithere&someothershithere=moreshit

one could feasibly get away with a site using subdomains

abc.com.securelogin.ru/hackyourshit.php
User avatar
tremor77
Addict
Addict
 
Posts: 1098
Joined: Wed Mar 31, 2010 12:00 pm
Location: New York
Blog: View Blog (0)



Return to Networking

Who is online

Users browsing this forum: No registered users and 0 guests