HW3 : OpenSSL

1
HW3 OpenSSL DNS Spoofing
2
Goal

• Use OpenSSL library to implement
• A client that connects to an HTTPS ask for
  /index.html
• An HTTPS server serves /index.html
• DNS spoofing in an open wireless LAN (100 pts)

3
Demo Requirement

• The client must (70 pts)
• Be implemented using openssl library
• Be able to connect an HTTPS server and ask for
  /index.html
• Verification of HTTPS server could be ignored
• Explain SSL key exchange process using wireshark
• The server (85 pts)
• Be implemented using openssl library
• Be able to serve /index.html
• It is fine to serve only one client
• DNS Spoofing (100 pts)
• Monitor 802.11 frames in the WLAN
• Catch DNS query sent by other STAs
• Spoof DNS response to phish
• Explain your program

4
Note

• No partial credit
• Code must be uploaded
• Code plagiarism is not allowed
• (Punished by pts sharing)
• 5 minutes to convince TAs that you understand the
  code
• Demo Date 1/13

5
Supplement on DNS Spoofing

• You need
• Atheros wifi card
• Madwifi driver
• Use nslookup to perform the DNS lookup
• To monitor packets, you could use Libpcap
• To forge packets, you could use raw sockets
• Success of DNS Spoofing depends on timing
• You get 100 pts as long as you succeed ONCE!

6
Useful Reference

• 1 wiki openssl http//en.wikipedia.org/wiki/Ope
  nSSL
• 2 openssl example
• http//www.rtfm.com/openssl-examples/
• 3 openssl online document
• http//www.openssl.org/