Hi and welcome back in this lecture, you learn how to steal the login information using the social
engineering toolkit.
So first of all, make sure DNS mask host APD and Apache Web Server is running on your system.
And then you need to have the Captive Portal web page, which will be used to appear when clients try
to connect to the access point.
And in my case, I have the captive portal files here in the basic portal folder.
So if I use L.S., you can see the files.
OK, now let's start the social engineering toolkit by typing CIT Toolkit and here select social engineering
attacks by typing number one.
Now it will show you another set of options.
So select second option website attack vectors and use the Credential Harvester attack method.
And here I would select custom import.
This option allows you to import your own website.
Now, in this step, it would ask you for your IP address, so if you are using this attack with an
access point made sure you are using the IP address form your wireless interface, which you can easily
find by typing ifconfig and here own DoubleLine Zero is the IP address.
So I will type one and two one six say that 1.1 and no, I need to enter the pad for the captive portal
files or website.
So in my case, is rude slash basic portal and press enter.
And here I will use the second option to copy the entire folder.
And for the URL, I will use the IP address for the login page and press enter.
And now the credential hardware store is running.
So let's just do Windows Machine and connect to the access point.
And I'm going to type test for the user name and set tool kit for the password and click the login button.
OK, now let's go back to the machine and you can see the login credentials from the target.
So thanks for watching and I'll see you next time.