Hello everybody and welcome back to the man in the middle section.
Now what I want to show you before the eco cap is how you can clone any web page on the Internet and
use it as a fake log in page or fake page on your Apache web server.
Then you can combine the attacks we did previously in order to redirect users to that page.
Now I will show you that it is very simple.
Now basically let us first open our terminal.
Let me enlarge this.
And what you want to do before anything is check out your Apache too.
If it is running so service Apache to status which will give you if the service is running or not.
So as we can see my Apache too is running.
It is active and running.
And let me just close this.
OK.
In if your isn't running you just type your service.
Apache tool.
And then start.
And this will start your Apache tool.
So now that you did that how you can see that in the files that are located in that page you can basically
first go to the this director right here which is slash var slash w w w slash h the amount.
And here when you type your l s are all the files that you have in this current directory and all of
the files in this current directory are also the files that will be displayed in the page.
So let us create a simple text file so nano text not the extreme and type here.
Hello.
It doesn't even matter.
So now if you type your alas we have a simple text file right here.
So let's go to our Firefox and what you want to do is basically just type your own IP address and you
will be redirected to your Apache to web server or web browser page which is my IP address is my 92
dot 168 dot 1 7.
So if we type that 180 to that 168 that one that's seven loops you will see that here we will have a
patch two point four port 38 server running at this IP address which is my IP address on port 80 and
we have the text of the file that we created in the slash bar slash w w w slash HDMI I'll follow but
right now let us see how we can actually host an entire page there.
Now in order for you to actually call on the page what you want to do is for example let's go on Facebook
dot com if we go to the Facebook
as soon as it loads what you want to do is right click on it and then we want to crown the page so.
But first we need to wait for this to load.
Not sure why it is taking so much time.
I don't think I have a purpose it turned on so it should load successfully looking up.
So exploit DP Let's try other trades for all that is not working.
OK.
So I ran out of the Internet
server not found.
Looks like I don't have internet at the moment so let me just restarted real quick.
So here I am now.
I restarted my roster and now I should be able to have Internet.
So let me just start off where I cut the tutorial so we wanted to clone the Facebook page for example
so you just go to the page itself or any other page one.
Basically the principle is the same.
So what you want to do is right click on the page and go to the Save pages.
Now you will do this only on the Firefox browser I believe there is this plug in that you can save pages
so you're using any other browser browser or search engine.
I don't think there that they have this.
They possibly could.
They're not really sure you can try it.
But from now on just click on the Save pages and what this will do basically equal as we can see it
has Facebook minus log in or sign up that each team out.
It will save it in the download.
So just click save and we can see right here it successfully saved everything.
So this is the entire page.
Here it is.
And here are the files that they are referring to for this page.
Now by that I mean basically these pictures or anything else that there is right here.
Basically if we go right here we can have some of the Java Script files.
Well mostly our script files some CSF.
So basically from this age the email page in this code right here.
It will refer to the files in here.
So when you want to count the page now that we downloaded everything we need we just need to copy these
two files in our slash was large W WW slash HDMI folder which is our Apache do folder.
So let me just close the Facebook right here.
This is the current Apache folder.
So we only have text on the extreme and right now.
First we want to navigate to the downloads or root and then downloads.
If you type here unless you will see here our two files that we need to copy.
So one of them is safety e-mail and one of them is directory containing JavaScript files and other files
it needs.
So let's copy or let's actually more.
This is the HDMI all we want to move it into r w double w h the amount.
OK.
So we moved one of them and now we want to move the other one into law.
W w w h timeout and we most both of them.
So let us just close this we do not need it anymore.
And right now if you go to divide w w w h t amount he will see we have these files right here which
is the directory with files needed and the H the email file now we can remove now this text or the extreme
we do not need it anymore.
And now if you go to the Firefox and refresh the page you will notice that it doesn't really load the
page.
It only loads these two files so you can download them.
Now that is because of the thing that I was talking about in the previous videos the Apache to want
to render out the page or the HDMI code unless the main HDMI file is called index dot HDMI well.
So what you want to do is rename the index the file dot h the e-mail so this one into index of each
came.
So how we do that more Facebook outage the and we rename it to index not HDMI out.
So right I type here.
Alas once again we have the folder containing files and we have the index top page the amount which
is the main page.
So let us render the page out again so we refresh it.
And right now you can see that we successfully cloned the Facebook page.
So this is on our attached to web server as you can see the address is one two that one said at 1 7
and everything else looks exactly like Facebook.
Now what you can do is basically use the attacks we did before for example that man in the middle of
DNS spoofing attack.
You can just redirect or try to redirect the real Facebook page to this IP address right here.
And any time now or basically any website that you can you can just if someone typed Facebook dot com
in their browser while you're performing they are spoofing and DNS attack they will be redirected to
this Facebook page which looks identical.
The only thing they can actually notice which would be different than the real Facebook page is the
link right here.
So in the real Facebook page if we go to it you can see that it has a legitimate G.P.S. link with the
green thing right here.
Green Block and here it is basically just the IP address of our calisthenics machine.
So that is the only difference.
And right here we also see that it didn't really render the Facebook sign for some reason possibly it's
not in the file but it doesn't really matter.
And this type of attack or this type of cloning you can do for any page you want you're just right click
on it save pages and then you rename the main file manage the email file into indexed updates the amount
and then you paste all the files in the slash fasteners w w w slash page the amount.
So I just wanted to show you that and that would be it for this trio.
And now we will finally go to the ether cap in the next one and I hope I see you there by.