Hi, and welcome back to Section 12 Tunneling Tru, a network.
In this video, you'll learn about poor traffic attacks.
I hope you're excited.
So let's iPhone N Port Forwarding simply allows us to
manipulate traffic by redirecting destination traffic for one
IP and port number to another IP address, and another port number.
To perform this, let's boot up our taco machine,
which is our main Cali Lang machine. And secondly,
let's power on our compromised Lenox virtual machine.
Once your machine is booted, simply log in like so.
Once you log,
let's check to see if we can reach Google from our attacks machine.
Let's open a terminal like so,
and let's google google.com and let's
send four ping messages. Great.
We have interconnectivity between our attack machine and the
internet.
Let's copy the IP address of google.com like so,
and let's try to grab devana or at least download
HTD P page.
Let's do NC dash N vv,
the IP address followed by port 80.
Enter currently we can see we have an open connection.
Let's type get slash htd p
slash 1.0 like so and hit enter.
Let's sit enter one more time and this will download the HTD P pH
three.
So now we know for sure our tackle machine has internet access.
Next, let's pull on the compromised OX machine.
But before we do so,
let's imagine this compromised machine has no internet
access,
so therefore it cannot reach Google To simulate this no internet
connectivity.
Let's disable the internet adapter settings on the virtual machine.
Select a compromised Lenox VM like so. Click on settings,
click on network. And if you recall,
adapter one allows us to bridge the virtual adapter to our network with internet
connection. Let's disable adapter one.
Ensure adapter two is not modified in any way. Simply click on key.
Now let's power on the Compromise Lenox virtual machine.
This Compromise Ox virtual machine will simply function as a machine within
an organization's internal network that has no internet access.
The objective is to simply redirect traffic from one system to another
system well from one system through another system.
Once the compromise machine is booted,
simply log in with your default credentials,
all the credentials that you have configured.
Great. Let's enable SSH on this compromise system.
Enabling SSH will simply allow our machine to securely connect
to this compromise system over a network at Skype.
Pseudo service ssh.
Great. So now let's work from one system.
I'm simply going to minimize the compromise system and I'll stay on my attackers
machine. So now I'm on my attackers machine.
Let's SSH two, the Compromise Lenox machine.
So we will do SSH Carly
at and IP address, all four compromise system.
I'm gonna type PS to accept and enter the password of my
Compromise System.
So greet now I'm connected to the Carlys machine,
which apparently has no internet access.
Let's try
NC Space dash nv.
Let's try to download the webpage from Google.
To do this,
we'll simply specify the IP address of Google and we'll type
port 80.
This will firstly try to establish a connection and as you
can see, the compromise system is saying network unreachable.
This means there's no internet access.
So great, let's keep this signal open.
Let's click on file and let's open in uab.
Let's type pseudo a P T update
to update a packages repository.
And next,
let's download a particular tool that will allow us to perform Port forwarding
all type pseudo app install
r i n td,
like so simply enter and letter installation complete.
Let's type cut slash e,
TC slash R I N e. TD
F. Simply enter
as these are the forwarding rules. As it says,
you may simply allow and deny rules after a specific forwarding rule to
apply to only the forwarding rule, which seems to be a bit confusing.
So let's make our own rule. Let's press up.
Let's type pseudo nano,
followed by the directory together with a configuration file and hit enter.
Let's scroll down to where we have the forwarding rules.
Let's press enter here and let's specify
0, 0, 0.
So let's space this.
Let's specify the port number, which is 80.
So this means that our AKA machine will always listen
for any sort of in common traffic. On port 80,
any incoming traffic will then be forwarded to Google's IP address
and to destination port 80, like Zoom. Great.
I think we should remove the space at the beginning of the line.
So it looks like this. Once you're ready,
simply press Ctrl and X,
Y and enter Dece. Let's type cut.
Specify the file newly so and enter to verify our entries.
So as mentioned,
our car links machine will listen on all interfaces on port 80.
Any in common traffic on port 80 will then be forwarded to this
IP address on port 80. So let's go back to our previous.
If you recall, this previous
is connected to our Compromise system.
So let's try this one more time.
Let's try to establish a connection to Google's website on port 80
and let's see what happens. Great.
It is saying network is unreachable. All right,
but let's try something a little different.
Let's get the IP address of the machine. I'm going click one two.
Number two,
I'm gonna type IP a ddr like so
the machine is currently using
1 7 2 31 41. I'm going to copy this,
then I'm gonna head over, back to 2 0 1.
I'm gonna press up a couple of times and in insert,
I connect to Google directly from the Compromise System.
I'm going to connect from the Compromise System to the attack machine,
one port 80. Let's see what, what happens at the same connection.
Refuse,
I think you may have forgot an additional configuration.
We need to actually stop the R I N E TD service.
Let's settle back to terminal two. To do this,
let's type pseudo service R I N
E, TD, and we'll type restart. Great.
Let's set a box with 2 0 1.
Let's verify that a Compromise system is unable to connect to the internet,
which shows network is unreachable, which is expected.
But now let's try to create a connection from the Compromise System
to the attack machine. And notice it says Open.
Let's type get space slash HT d p
slash 1.0 and let's it enter.
Let's it enter one more time. And look,
it has downloaded the web page from google.com.
In this video,
you have learned how to perform a port forwarding attack using Carly Lenox.
In the next video, we'll be starting section two team.
I hope this video has been informative for you and I'll see you in the next one.