Auto DNS poisoning: while charging Android smartphone via computer it is possible to perform automated and even remotely controlled DNS poisoning without any user interaction

www.mobile-hacker.com Automated DNS poisoning using Android while charging via computer - Mobile Hacker

In today’s interconnected digital world, the Domain Name System (DNS) plays a pivotal role in translating human-readable domain names into IP addresses. It’s the backbone of the internet, ensuring that when you type a web address into your browser, you’re directed to the right website. However, lurk...

8 comments

So, to achieve this:

the windows user has to login with a user who has admin rights

then plugin an android phone with said script installed

Sounds like darwinism.
- Yeah. It was pretty interesting to hear the details of pretending to be a HID device and how you could use it in practice to make malicious changes to the host computer. But surely adding to /etc/hosts is not the most preferred sneaky thing you can do with your unrestricted access.
- Isnt the average Windows user not logged in as admin?
  
  Most Americans I know own their own computer. Unless it's with young kids in the house, every individual windows PC is one account with admin access.
  
  You would also get several prompts asking if you want to do this, both from Windows under UAC (by default, even if you can escalate), the Android driver, and the phone itself. It's rarely the case now that Windows users execute privileged actions without notification, but it's possible.
  
  I don't want to discourage people testing ways to compromise security for the good of everyone, but this is a well known vector and a lot of jumps have to succeed to give the attacker value.
  
  You can cut down a lot of room for failure by just using a rubber ducky USB instead. It doesnt have to be an Android phone. Even then, there's more than a few controls in the way.
  
  I also own my computer. Doesn't hold me back to remove my user all admin rights. If you still log in with admin rights, being hacked by a charging phone won't be the first bad thing happening to your system.
Would be more robust for the phone to say "hey, I'm your new network interface" (a.k.a. usb tethering). AFAIK, it'd use DNS provided by the device.

The pro's are that it works on all the os'es ootb and doesn't create suspicious windows on connection, so you don't need to distract the victim

You've viewed 8 comments.