Malware Forge

So I was trying to get WPAD to work for a class I was in, and the documentation seemed to be scattered across the internet. I finally was able to figure it out, and it was much easier than I thought.

Operating System: CentOS 5.2
Packages: DHCP, Bind, Squid, Apache

/etc/dhcpd.conf
option domain-name "domain.tld.";
option wpad-curl code 252 = text;
option wpad-curl "http://wpad.domain.tld";
option www-server www.domain.tld;

/var/www/domain.tld.db
wpad.domain.tld. IN CNAME hostname.domain.tld.
www.domain.tld. IN CNAME hostname.domain.tld.

/etc/httpd/conf/httpd.conf
Add application/x-ns-proxy-autoconfig .dat
Add application/x-javascript-config dat pac

/etc/squid/squid.conf
acl bad_url dstdomain "/etc/squid/bad_urls.squid
http_access deny bad_url
acl our_network src 192.168.1.0/24
http_access allow our_network

/var/www/html/wpad.dat
function FindProxyForURL(url,host)
{
return "PROXY wpad.domain.tld:3128";
}

Works with Firefox 3 and IE7