3 ms·
But if you control the DNS, you can serve a fake LinkedIn from linkedin.com. Can't do https though. Edit: Ignore it, I forgot he didn't control the DNS at that
by batuhanicoz 13y ago
But if you control the DNS, you can serve a fake LinkedIn from linkedin.com. Can't do https though.
Edit: Ignore it, I forgot he didn't control the DNS at that point. So this is invalid.
- aaronem 13y agoBut the attacker didn't yet control the DNS when he sent the link to the exploit; he needed the exploit in order to compromise the router and put the DNS hijack in place. So I'm not sure how the hell it worked.
- btown 13y agoNote that at that point in the attack, he had not yet gained access to the router, so he didn't control DNS yet.
- batuhanicoz 13y agoOh yes, I missed that fact. Sorry.
- deleted 13y ago[deleted]