h43z / dns-rebinding-tool

dns rebind tool with custom scripts
http://dnsrebindtool.43z.one/
75 stars 9 forks source link

can we use this in a captive portal webpages that opens in the default web viewer ? #2

Open minanagehsalalma opened 5 years ago

h43z commented 5 years ago

You mean use a dns rebinding attack against the captive portal? I'd say yes.

minanagehsalalma commented 5 years ago

"You mean use a dns rebinding attack against the captive portal?" here is what i have in my mind ..... evil twining a wifi using fluxion or whatever .... when the user opening the captive portal sign in network page (that has dns rebinding scripts in it )is detected we stop the ddos ... the user auto connects to his wifi then the page refreshes and execute the dns rebinding attack to get the wifi password from his router ....

i asked this question cause the android phones doesn't open the captive portal web pages in chrome or the default web handler automatically but manually image

i think it opens it in (Android Browser) maybe this Android System WebView

so i didn't think it will function well in this browser @h43z