What is "web spoofing"?

Web Spoofing is Tricking Someone into visiting a Website other than one they intend to visit ,by creating a similar website.
The attacker must somehow lure the victim into the attacker’s false web.

There are several ways to do this.

STEP  1:

1. A Phisher could insert a malicious script inside a product review to attack the user.
2. The Script would modify the host site so that the user believes he/she is interacting with secure site.
3. This technique is also called as  “Cross Scripting.”

Step : 2 :Rewriting the URL:

1. Assuming the attacker’s server is on the machine www.attacker.org, the attacker rewrites a URL  by adding http://www.attacker.org to the front of the URL.
2. Example:
3. http://home.netscape.com                                                                                                        www.attacker.com/http://home.netscape.com

STEP:3

1. Once the attacker’s server has fetched the real document needed to satisfy the request, the attacker rewrites all of the URLs in the document
2. Then the attacker’s server provides the rewritten page to the victim’s browser.
3. If the victim follows a link on the new page, the victim remains trapped in the attacker’s false web.

its working is shown as above..