05 - attack and defense of phishing websites

1、 Attack principle

Use one CentOS Acting as a gateway , Then do it SNAT, Make it possible to access the Internet , Configure on the gateway DNS analysis , Specify when the user accesses JD When , Jump to the server we deployed

Use one CentOS Acting as a server , Then build a high imitation website , Used to confuse the client

2、 Attack environment

• GW CentOS 7 1804 （ gateway ）
• Server CentOS 7 1804（ The server ）
• Client Windows 7（ client ）

3、 Gateway preparation

3.1、 Set in gateway SNAT Make it possible to access the Internet

[[email protected] Desktop]# cat snat.sh 
iptables -t nat -I POSTROUTING -p all -s 192.168.2.0/24 -o ens34 -j SNAT --to-source 192.168.79.160

iptables -t nat -I POSTROUTING -p all -s 172.16.2.0/24 -o ens34 -j SNAT --to-source 192.168.79.160
iptables -nvL 
[[email protected] Desktop]# 

Created this file , Then run the file through the command , That's all right. , But it needs to be rebooted DNS、DHCP service

At this point, the client can PING Internet access