Welcome back. Let's take a look at the next attack. Honest.
During session hijacking.
As seen previously, hello protocol is used
to have a bi-directional communication between systems.
Since this party protocol does not check the source IP address
from where the packets are received. It is quite easy for
an attacker to hijack, in in session since the protocol
will not buy a great. Let's take a simple example.
So this is the type of machine in which the telnet server
is running. So in the petitioner you and just monitoring my own
local network adapter. That is eth0.
So now we have started sniffing the traffic.
Now let's go add from the victim machine and try to log
into the server.
Closing text would be the network panel server IP
address.
So I see, see you see a login, prompt.
And I've logged into this particular machine. So I'm just going to do
some basic turn attack activity such as listing The Vines.
And seeing the current working directory.
So now let's go back to
attack us over. We are wanting the Trap.
We see it as a constant.
Network sleeping happen, so let's go ahead and search from the continent.
So we saw there was a connection that was initiated
and established. So let's look at
the ports that are being used. So
we see that the server is running on the default boot as 23 in
the client is connecting on 1371.
So now we're going to use one of the tool
known as shy check. So using this
tool, we can intercept on this particular port for 10 minute.
So I'm going to run
Linux executable, wash Isaac.
And be able to connect
to the particular ethernet adapter. Could be my local
ethernet adapter in which I'm going to type in
the client. IP, that was connecting.
Worldwide reports that is being used by the client. So
that would be 1, 3, C1.
And the server.
And wouldn't be running. So
let's try to generate some normal activities.
So weak so that a particular child Jack was
able to intercept the sequence packet for the initiation. It
was able to highlight it. What I'm going to do is
like create a folder.
And this using the command mkdir, the
folder name. And now the victim
since its connection was lost because we had to separate the
particular session. So now let's go ahead and log
in again.
And I can use list all the folders. So now we
are able to see that photo was created in your
hat.
This is what attacker sent using this particular subject to.
So this is one such scenario where an
attacker is actually doubting all the traffic diversion. And
in that scenario. We know all the information
such as the client and the server IP addresses.
And the port numbers that were that is required to hijack. The session.
This will read it. Read the scenario was in this scenario where
a victim is trying to access the server and
we have an attacker, who's actually helps pooping it in
such a way that all the traffic is routed towards him. Only using
the second sniff required, physical
details, such as IP addresses, and port numbers, and once
the victims of since articulated, you to go following
some basic activities, which generate more traffic using that, we
will be able to predict the sequence that we would.
Be able to perform any bulges operas require that
the first video. Thank you.