Hello everybody and welcome back and let us explain a theory what the attack this will be performing
is actually so we covered in the previous video what our protocol is.
And I also said that the our protocol is the fundamental of the man in the middle attack.
Now the man in the middle attack basically starts off with something called the ARP spoofing.
Now the ARP spoofing is basically the same if you want to look at it for example the MAC address spoofing
is us changing our mac address to someone else's MAC address.
The ARB spoofing would be us pretending to be to be someone we are not.
So let me just open up a patent right here and let us draw our simple victim P.C. right here.
So this is a victim P.C.
let's say this right here is our router and this is our Kelly Linux machine.
So we are the attacker and now we know.
Let me just finish this screen right here.
I will select it with a so you know that this is the attacker machine.
And now we know what the ARP uh protocol is.
So in order for this fix to proceed P.C. to communicate with the rotor it has to know its MAC address.
So that's how they communicate.
So basically the SPC knows to who to send the packet for the Internet user once it finds out the routers
MAC address so it knows then that it should send the packet to be water in order for it to continue
to the Internet.
So the packets go or something like this.
And then the router once it uh once it receives the packet from the victim it forwards it to the Web
site or to other machine wherever the packet.
This is going to once the other machine or the other packet from the Internet receiver sends the answer
The writer then says Oh this is the answer for or basically this is the answer for this big time machine
right here.
And it sends the response back.
So this is your normal connection works.
Basically the the basic connection between DB and P.C. and the water and then between the router and
a certain Web site and then they are sent back and forth the responses and requests.
Now let me just how can I undo this.
So that was a normal connection.
Now once you run the arms poor thing it means that you actually pretend to be someone who you're not.
So we modify the art packets and we send to the router that the basically D MAC address of the victim
b c is our mac address and we send to the victim that the MAC address over alter is our mac address.
Now what I mean by that.
Once the.
For example this P.C. sends a not request for to find out where the water is.
We basically send that victim b c and r reply and we say the router is at my mac address and then this
victim P C will think that we are defaulter and therefore all of its packets it will send to us from
then and then we can filter these packets or we can see these packets we can basically see what the
victim has sent and also if you were to only do this if you were to only spoof the victim or basically
first it all is the router you wouldn't be able to forward the packets so you need to pull both the
victim and both voter.
So after this uh you need to spoof as well.
The Democrat address of the victim.
So once the reporter says who is the at this IP address of this victim to reply with the MAC address
of that IP address is me.
So basically instead of the connection going like this to the router it goes to us and then from us
to the router and then router sends it to some web website and receives the packet back.
And since it is spoofed with our protocol now router things we are the victim.
P.S. And it you send a packet loss.
So it again sends it back to us and forward the request back to the reply back to the victim.
P.S. so the victim P C doesn't notice anything.
Only maybe a little bit slower connection and we can read all of the packet that are flowing between
these two.
So for example if the SBC was to logging on to an ATP website with a log in user name and password we
would be able to see that in plain text
so that is the basic idea of the man in the middle attack.
Now you can do a lot of things which we will cover.
For example you can switch the downloading files in the process of downloading them.
You can also do the show.
You can also catch a screenshot from the victims.
P.S. your mobile phone.
You can also do all sorts of things for example with their images or basically switch their images or
redirect them to a certain websites to some evil websites that you hosted or basically anything you
want.
You can also try to run some of the script attacks the feed to sends it to the website to some kind
of a website.
You can also just inspect the packets and not do anything and hope that the victim will log in on some
page that you can inspect packets in know the.
There is one thing that we need to also know that there is in NC DP s website.
So for example if the victim right here wanted to visit an agent CPS Web sites while it while being
Arps post the HDP s back it would go to us and then to the voter.
But since then.
But because of the design of the CPS we will not be able to read the packet in plain text.
Now if the CPS is running on as a cell we can perform the SSL strip and if the entity PSC is running
on DL s or basically lets say this victim wanted to connect to be Facebook and type in username and
password we would not be able to see that username and password in plain text since Facebook is running
on the MLS and we cannot decrypt the MLS so we will only be able to do this on as TTP websites and see
the passwords in plain text and on some HDP s websites that we can perform as the s trip on so that
will be about data for the theory behind this attack.
So we will cover some of the basics later on and will also perform some of this with it and try to do
a bunch of other things such as switching pictures on the website redirecting capturing of usernames
and passwords and so on and so on.
Now that would be about it for this lecture.
We will continue with demanding terminal attack in the next one and I hope I see you there.
By.