DNS Hijacking

                 DNS Hijacking with 000webhost and Afraid

Required:
  • 000webhost account
  • Afraid.org account
Steps:
000Webhost
     -Login to your account.
     -At List of your Domains , click on Go to CPanel 

-Scroll down and click on File Manager

-Upload your deface script as index.php into the public_html folder


-Do not forget to delete .htaccess and default.php 


Afraid.Org
    -Once you have login, click on Subdomain and Add a subdomain
-You will see a form, choose Many many more available

-Now click on Shared Domain Registry


-You will see a lot of domain. You can pick any site as target, or search for specific target such as .gov,.edu and more.


  -After that, you will get Add a subdomain form. Fill the form as below and save.

-If success, you will see something like this

000webhost
     -Go to Parked Domain


-Paste your target in the textbox and click on Park Domain.

  -That's all! Now go to your target URL and check if it's defaced. It needs a few minutes to make changes. If the site still not available, try another. :)