Everybody and welcome back.
And in the previous video I showed you how you can install the tool correctly with all the programs
it needs.
And right now we are good to go.
And we should be ready to run our first hour spoofing attack on this two.
Now if we type here let me just clear the screen and type once again and my TMF So you can either run
it with this.
So dot and then slash and add the name of the program or you can run it with Python and then add my
TMF minus Ritesh dash help.
So it will run the same output which is our available options for this program.
So let us see what we should use in order to run these simple are spoofing attack.
So if we scroll up we can see first thing that catches our eye is this proof right here.
So redirect modify traffics using ICMP de FCP or DNS.
Now for the first attack we want to use the ARB poker.
So what what we need to specify is two comments right here.
One of them each is this pork which is basically just loading the plug in spool and the next one is
the minus minus ARP which redirects traffic using ARP spoofing.
Now we already talked about our scoping is.
So you should already be familiar with what kind of attack we're running right here.
Now there are a few other things that we also need to specify.
Besides these two as you remember in these previous videos where we run with three commands they are
spoofing.
We had to specify the targets.
Now right here we can run the option in attack on all the targets that are on our local network.
We do not need to specify the target even though we can.
For example if you only wanted to target one simple one The P.C. you could do that with minus minus
target command I believe.
But if you do not specify any target and you only specify the gateway you will be are spoofing everyone
on the local area network.
So let's see how that works.
Basically as I said we want to specify this pull plug in the r plugin and also let me just scroll up.
I believe it's somewhere here.
As you can see there are a bunch of options right here.
Also what you need to specify is the minus eye for the interface.
So we need to specify the interface.
We're listening on and minus minus gateway for the hour round IP address.
Let me see if it is really minus minus gateway.
Here it is.
So specify the gateway IP.
Now we need those four options to run a simple option open attack.
So let's clear the screen and type IV config.
We can see that my interfaces DHS zero.
Now as I said before you can use an interface you want if you have connected your wireless adapter you
can use that interface as well.
I'll be using this interface since that interface is time connected on the network.
So that to start off with minus slash without slash and then add my DMX might not by her the first thing
we want to specify would basically be the interface we're running on.
So let's type here minus I.
And then it is a zero which is our interface.
So after that let's load the plug in spoof for spoofing attacks and let's set that to spoof with the
ARB protocol.
There lasting as I said that we need to specify is the gateway we did minus minus Gateway command.
And after that we specify the routers IP address.
Now if you do not know your alters IP address you can simply just open up another terminal and type
your net stat minus an hour.
It will give you the gateway IP address which is this one for me.
You can also you check the this IP address with I have config and it will also give you and just find
where it should give you the Gateway.
Well never mind it doesn't seem to give the gateway but you can use nets that minus an R and it will
for sure give you the gateway IP address.
So once you find out your gateway IP address this type one I do that 168 at 1 1 and we will be ready
to run the attack.
So let me just show you once again with the command prompt and art minus a comment we can see that currently
before we run the attack we can see that art minus eight gives a legit Mac address for our rather IP
as we can see when I do that.
Said that one one has this mac address and this right here is my laptop.
And let me just find.
OK.
It doesn't seem to have the the clinic's machines at MAC address right here.
But soon enough it will have it right here.
So we will be having this MAC address as you can see right here from the IV config output on our clinic's
machine instead of this MAC address right here on the Reuters IP address.
So let's run the attack.
Just press here enter.
It will load up this banner that they have it will load up all the plugins they have as we can see spoof
are spoofing enabled.
We can have something you.
These are just some of the options that you can specify.
And right now these spoofing is enabled and we are spoofing the entire network as we can see if I type
out minus say once again the MAC address of the router is the same now as the MAC address of our Kelvin
machine as we can see right here.
So these two are saying which means we are we successfully spoofed these windows machine.
Now let's see how what we can do once we spoof the machine.
So I'm right here on my google chrome on Windows 10.
And if I go to a simple Web site so we can see that in the app of our spoofing machine we can actually
see that the we can actually see who is visiting which Web site as we can see that one eye to that one
to say that one that sticks on the Chrome OS Windows is visiting this Web site right here.
Now be aware that this will not show for every Web site for example if I was its Twitter.
Let me just show you and I go right here.
It will not show us that the target has visited with dot com since Twitter is on edge the DP s over
to us.
Now that is basically no not yet one or both to the man in the middle attack or to the decryption tax
so we won't be able to see which Web site is the target visiting.
This will only work on HRT websites and on a GDP as websites running over SSL while performing the SSL
strip which I will show in the next videos.
Now for example.
If you have a page over HDP and that page has a log in for example form with username and password and
anyone now on the local network types the log in username and password there it will be visible in the
output of our ARB spoofing attack so we will be having username and password printed out right here.
But if someone for example goes to the to the HRT website as we can see right here and goes to a simple
simple log logging form as we can see it is a shitty CPS and our target right here cannot really.
Or our program right here cannot really see that website since it is our CPS and someone type plotting
over a CPS.
It will not print up anything in our output right here since it cannot perform as cell strip since we
didn't specify it yet.
Now in the next videos I will show you how we can actually gather the user name and password from this
website as well.
Even though it is over HDP s performing the SSL strip so that would be it about this tutorial.
This was just as simple as simple arm spoofing attack.
So this simple attack will only work as I said on AC DP websites for now and since we didn't really
use the SSL strip option.
So this is the most simple version of it of the attack that we can do and that will show you some of
the more advanced versions in the next videos.
Hope you enjoyed this video and I hope I see you in the next one.
By.