dnsspoof and dnsmasq

Deleted
Deleted Member

Posts: 0

dnsspoof and dnsmasq Nov 12, 2015 21:00:36 GMT

Quote

Post by Deleted on Nov 12, 2015 21:00:36 GMT

Good evening,

Thanks for a great product, it's really good to manage so many tools in one location. I've been doing some testing using Kali 2.0 and FruityWifi 2.2 and I'm having a problem with the dnsspoof module in that it seems to be conflicting with dnsmasq. Dnsmasq is listening on the sniff | inject interface Please see config below:

When I enable dnsspoof it appears that dnsmasq is answering DNS queries quicker than dnsspoof can modify them? My queries are therefore not resolved by dnsspoof and are forwarded on by dnsmasq to 8.8.8.8. I've been searching for documentation and there doesn't seem to be a good source of information for this kind of setup.

I would appreciate any advice you could give me as I believe I may have missed some part of the configuration.

Regards

yyw New Member Posts: 8	dnsspoof and dnsmasq Apr 4, 2016 13:01:45 GMT Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by yyw on Apr 4, 2016 13:01:45 GMT I have the same problem right now. Any solution?

xtr4nge
Administrator

Posts: 362

dnsspoof and dnsmasq Apr 4, 2016 13:53:35 GMT

Quote

Post by xtr4nge on Apr 4, 2016 13:53:35 GMT

Hi guys,
There is a problem with dnsmasq and an option that is not behaving anymore as before (--server) [you can see the old option commented in dnsmasq.conf]
This options was redirecting all the request to the servers listed in /etc/resolve.conf (FruityWiFi-IP-first, 8.8.8.8-IP-second), but this options is not working anymore. If you uncomment the option, dnsmasq will not start.

I'm working on a few alternatives to resolve this problem. Also I'm working on a new module that potentially will replace dnsspoof with new options and better control on the requests.

There are a few options that you can add to dnsmasq to achieve what you want to do without dnsspoof
www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

for example, adding the following line to dnsmasq.conf will redirect all DNS requests to FruityWiFi:

address=/#/{ip_FruityWiFi}

you can also add --strict-order to force the order on /etc/resolv.conf

strict-order

probably there is an option on dnsmasq replacing what --server option was doing before. If you find the option let me know.

regards,

Last Edit: Apr 4, 2016 14:12:00 GMT by xtr4nge

@xtr4nge

yyw New Member Posts: 8	dnsspoof and dnsmasq Apr 5, 2016 12:06:21 GMT Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by yyw on Apr 5, 2016 12:06:21 GMT Hi xtr4nge, thanks.

xtr4nge Administrator Posts: 362	dnsspoof and dnsmasq Apr 5, 2016 15:54:10 GMT Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by xtr4nge on Apr 5, 2016 15:54:10 GMT No problem. I will publish the new module and the changes as soon as possible. regards,
	@xtr4nge

xtr4nge
Administrator

Posts: 362

dnsspoof and dnsmasq Apr 12, 2016 8:10:09 GMT n1ete likes this

Quote

Post by xtr4nge on Apr 12, 2016 8:10:09 GMT

Hi guys,
FruityDNS has been released to replace DNSmasq as DNS server and to replace DNSspoof with more dynamic options.

Just install FruityDNS and change the DNS server to FruityDNS on AP module config tab DHCP-DNS

regards,

@xtr4nge

dnsspoof and dnsmasq

Post by Deleted on Nov 12, 2015 21:00:36 GMT

Post by yyw on Apr 4, 2016 13:01:45 GMT

Post by xtr4nge on Apr 4, 2016 13:53:35 GMT

Post by yyw on Apr 5, 2016 12:06:21 GMT

Post by xtr4nge on Apr 5, 2016 15:54:10 GMT

Post by xtr4nge on Apr 12, 2016 8:10:09 GMT