Hello everybody.
And welcome back to the last video in the man in the middle attack section.
Now we will cover the usage of ether cap which is a tool that comes pre installed in clinics.
So let us get started.
Now this tool has two interfaces one is the interface over terminal so basically command line interface
and the other one is the interface.
Now you can access the command line interface just by typing it or cap and it will give you your available
options.
Now it asks you to select interface nurse so you can do that.
But right now what I want to show you is the gooey interface.
They have some differences but they are the same tool.
So now you can find a good interface going to these sniffing spoofing and then you go to the ether cap
which is right here.
This is the graphical user interface.
You click on it and it should open up the tool.
Now we will not cover the tool in great detail.
We will only cover some of the options available right here.
So let us get started now what you want to do basically first of all you want to go to the files sniff
and choose type of sniffing.
So what you want to do is choose unified sniffing.
Most likely in some other cases you might want to choose pre sniffing.
But right now we'll go with unified.
And here you can select your network interface.
Now I only have the 88 0.
If you have your wireless network card adapter connected you can selected right here if you want to
use that one right now I will just go with the 88 0.
So just click here.
OK.
And right here we can see down down there started unified sniffing.
Now what you want to do right after this is basically go to the hosts and you want to scan for all the
hosts on the local area network.
So scan for the hosts.
It will scan all possible 255 hosts and it will show you which hosts are currently up on your local
network.
It will say for hosts added to the host lists.
Now we to access the host list.
So basically just go here hosts and then hosts less here you will have the all of the devices that are
currently connected and online on your local area network as we can see.
Now let me just check out what is the IP address of my oh my understand machine.
It is not one but three.
This one is my laptop and this one I believe is making a Linux machine since there isn't really any
else much any else machine on the network currently.
Now what you want to do now to have to date.
Let's say we want to target our Windows 10 machines.
So we want to ask both deep understand machine what you want to do is basically click on the router
and then add it to the target one.
So at router to target one and it will say right here host one and 192 that 168 that one had to target
one then what you want to do is choose your Windows 10 machine which in or basically any other machine
you want to ask both and choose right here added to Target to
and then let me just see where it is.
View target's current targets right here and here you will have the list of the targets.
Now what you want to do after this.
Basically let me just go to the shelter I believe it is right known it's not right here
you can go to the Rizzo IP addresses
and what you want to do after this is basically go to the man in the middle which is is right here and
Jews are poisoning.
This will ask you if you want to sniff remote connections on only in one way.
Right now we want to sniff remote connections click here.
OK.
And you will see that the ARB spoofing has started now everything that your target's now or your target
actually types in an age TTP website will be shown right here.
So if it was a tenacity TTP upsets and tries to log into some page you will see the username and password
in clear text right here.
So now nothing you can do is basically let me just see
where is the plug in.
Manage the plug in.
So just click on manage the plugins.
And here you have two type of plugins that you can add for example DNS spoof sent spoof DNS replies.
You can also run DOS attack and you can run all of the other attacks as well.
Now I believe this is the here is DSL strip as well as in the previous two.
So you can roll the SSL slip as well.
And this basically performs the same as e the previous toll that we cover.
So if I were to for example visit an ETP page and log in for example it would be showed right here.
Now that is the simple use of this tool if you want to you can try out all of these plugins right here
but there are really most of them are not really that important.
Or most of them are actually only there for you to specify a more detailed attack.
This will do its job for now on you can you might want to add DSL strip and DNS spoofing later on but
we already did that in the previous two.
We will not be doing that in this tool as well.
And I just wanted to show you how this tool works and that will be it about this tutorial.
So in this section we covered the man in the middle framework we showed how to download it how to use
it.
We ran some different types of attacks such as for example randomize images then using a screen shot
her then are spoofing DNS spoofing and recaptured the usernames and passwords on ATP as Web sites as
well as on as well as on ATP while performing the SSL strip and those could be some of the useful attacks
that you can perform on your local network.
Now these attacks do not work on the outside of your local network so they only work for all the targets
on your father's network or on your basically connect data connected to a router and in the next section
we will start learning system hacking so we will for example learn the metal plate framework in great
details we'll learn some of the exploits for that we will hack windows as well as Linux and then after
that we will also hack some of the Android devices and Iow devices with another tool.
So that would be about it for this section.
I hope you enjoyed it and I hope I see you in the next section where we will start system hacking.
Hope I see you there and take care.
Bye.