Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dns.spoof error serializing packet: serializing resource record of type Unknown not supported. #843

Closed
acheong08 opened this issue Mar 9, 2021 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@acheong08
Copy link

Environment

Please provide:

  • bettercap v2.29 (built for darwin amd64 with go1.15.6)
  • Darwin Example.local 20.3.0 Darwin Kernel Version 20.3.0: Thu Jan 21 00:07:06 PST 2021; root:xnu-7195.81.3~1/RELEASE_X86_64 x86_64
  • go version go1.16 darwin/amd64
  • sudo bettercap -iface en0
  • Terminal

Steps to Reproduce

  1. set dns.spoof.domains example.com
  2. set dns.spoof.address 172.20.10.16
  3. dns.spoof on
  4. Visit example.com with safari

Expected behavior:

Redirect to 172.20.10.16

--
What happened
When visiting with Safari

172.20.10.0/24 > 172.20.10.14  » dns.spoof off
172.20.10.0/24 > 172.20.10.14  » dns.spoof on
[16:28:30] [sys.log] [inf] dns.spoof example.com -> 172.20.10.16
[16:28:30] [sys.log] [inf] dns.spoof enabling forwarding.
172.20.10.0/24 > 172.20.10.14  » [16:28:36] [sys.log] [inf] dns.spoof sending spoofed DNS reply for example.com (->172.20.10.16) to 172.20.10.14 : f8:ff:c2:3e:20:f0.
172.20.10.0/24 > 172.20.10.14  » [16:28:49] [sys.log] [err] error serializing packet: serializing resource record of type Unknown not supported.
172.20.10.0/24 > 172.20.10.14  » [16:28:49] [sys.log] [inf] dns.spoof sending spoofed DNS reply for example.com (->172.20.10.16) to 172.20.10.14 : f8:ff:c2:3e:20:f0.
172.20.10.0/24 > 172.20.10.14  » [16:28:49] [sys.log] [err] error serializing packet: serializing resource record of type Unknown not supported.

However, it works when using the dig command

 $ dig example.com

; <<>> DiG 9.10.6 <<>> example.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37714
;; flags: qr; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;example.com.			IN	A

;; ANSWER SECTION:
example.com.		1024	IN	A	172.20.10.16

;; Query time: 24 msec
;; SERVER: 172.20.10.16#53(172.20.10.16)
;; WHEN: Tue Mar 09 16:33:48 CST 2021
;; MSG SIZE  rcvd: 56

172.20.10.0/24 > 172.20.10.14 » [16:33:48] [sys.log] [inf] dns.spoof sending spoofed DNS reply for example.com (->172.20.10.16) to 172.20.10.14 : f8:ff:c2:3e:20:f0.

@evilsocket evilsocket self-assigned this Mar 23, 2021
@evilsocket evilsocket added the bug Something isn't working label Mar 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Development

No branches or pull requests

2 participants