Welcome back to Basic Exploit Development.
In this section, we're going to show you how to use a proxy art bridge offensively that requires physical
access to the targeted client and just a single warrantless car to be inserted into any Linux machine
on the corporate network.
So if physical penetration testers, that is the ones that pick locks, use a shovel tool to open the
handle on the other side.
If they match a break into a facility that they are allowed to perform a penetration test on, they
have an opportunity to create a proxy our bridge, a properly configured proxy, our bridge well, our
seamless flow of traffic from a wireless card to a late Ethernet card, effectively allowing the wireless
networks clients to communicate to that land Ethernet.
All that is needed is the attackers to funnel in the next machine is a wireless USB adapter.
Those cheap five $10 wireless currency find fries and then run PR routed or a proxy ARP routing daemon.
The command is proxy R&D and PR routing your wireless card and your Ethernet card.
So let's see.
Let's show you how this works, because the wireless card is going to be running hot, APD, which generates
a wireless hotspot, and you want on that hotspot that's logged in, should be able to communicate to
the corporate LAN.
Here is a diagram.
These red triangles represent attackers.
Now, let's assume that we found a Linux machine inside the corporate network.
We inserted a cheap five $10 wireless card onto it, and then we ran PR throughout it.
The hot spot is where the attackers will lock back end using amplified or parabolic or Yagi style wireless
antennas.
And when when they connect to the to the hot spot, they are able to reach the victims within the Ethernet
side of the LAN.
How it works is that PR routed is basically forwarding all our requests and responses.
So we are going to create a far less hotspot from our wireless card and then have our attackers log
in to the hotspot and then use proxy ARP routing daemon to forward packets into the internet.
LAN.
This is a layer three network level attack.
So let's just get this started.
First you want to install on the victim sudo app get install dash wide hosting.
They already have that.
And you also need to configure the wireless hotspot.
So let us.
You just could with the wireless card of they just inserted into the victim you then just give it an
ID and a passphrase.
Now it's time to run wholesale APD to generate that hot spot.
Remember, we dropped a wireless adapter onto a victim Linux machine within the offices of the corporate
network.
If you were to check your phone right now, there should be a hotspot st proxy art bridge.
You can name anything you want.
And now we're going to use proxy our PR provided.
Let's see our network interface first.
Pure sprouted.
And that's your Eastern interface.
Copy and paste that.
And if you run it right now, it won't show you any inspiration on the console for stuff purposes.
But you want to see that it actually works.
You use Dashti.
And so if you're branded.