Chapter three interception of encrypted data attacks on SSL sessions the unauthorized reproduction in
whole or in part of this publication in any form is prohibited.
We will now create a temporary folder which we will use to install the software.
We then copy the tools we need from the Diskin closed to the hard disk.
Next we can start to compile and install the software
to perform our test.
We will need to initiate a connection from another computer on the local network.
In this case it is the victim computer whose IP address is 1 9 2 1 6 8 1 3.
This computer starts an encrypted connection with the example dot com machine as we can see the simulated
connection has been successful.
We will now try to intercept the connection of the victim computer with the example dot com host remotely.
Let's check if the packet transfer is activated.
If so the operation will display the value one on the screen we activate the transfer entering the value
1 to the file flash proc slash says slash net slash IPV for Slash IP under course forward.
We still have to configure the IP tables for this rule to work correctly.
The request tells the system kernel to transfer all packets directed to port 22 of the example com computer.
In order for the attack to terminate successfully in a switch based network it is necessary to use the
AARP spoof program.
Finally we run the S S H I M application which will help us to intercept the encrypted information.
So let's check if the operation works as planned.
As we can see the S-sh client informs us about a potential danger and prevents us from starting the
connection due to the change in the server fingerprint we'll delete the fingerprint database and try
to start the connection with the server again.
The attack has terminated successfully.
What can be seen on the first terminal
in the following part of the demonstration we will create a fake h t t p s server.
The first step is to generate a certificate.
We set a password to protect the certificate and other information that it will contain
this information will be available to the client.
And so it should be consistent with the fake server.
Finally we can sign the certificate.
We have created
now we set the redirect from the server we are spoofing.
In this case it is the Pay-Pal dot com.
We start the cat program and observed the results.
If it works the information sent to the server will be intercepted.
As we can see the attack ended with success.
We managed to intercept the transmission.