Now everything that we did so far will only work against TTP pages.
The reason why it works against each TTP because as we see in the data and TTP is sent as plain text
so it's text that humans like us can read and understand.
That's why when we're the man in the middle we're able to read this text and if we wanted we're able
to modify this text as we wish.
Now this is obviously a problem and this problem was fixed in haste TTP s so as you know most websites
use haste TTP as the reason why like I said because it's a more secure version of TTP and basically
the way it works is it adds an extra layer over his TTP which is where the S comes from.
So it's a security issue TTP protocol and this extra layer will encrypt the plain text data that each
TTP sends.
So if a person manages to become the man in the middle they will be able to read this data but the data
will be gibberish.
It will not be readable to the person intercepting the connection now TTP s relies on till s or SSL
to encrypt the data.
And this is very difficult to break.
Therefore in order to bypass this the easiest method is to downgrade haste TTP s connections to hate
TTP.
So since we're the man in the middle we can check if the target is requesting a hasty CPS website and
instead of giving him the hasty CPS version of that website we will give him the TTP version.
This way the data will be sent in plain text and we'll be able to read it exactly as I showed you in
the previous lecture.
To do this we'll have to manually configure and use a tool called SSL strobe and I show how to do this
in my more advanced courses.
But luckily Buttercup has a couplet that'll do all of this for us.
The only problem is this couplet does not replace all haste TTP s links to haste TTP in the loaded pages
so I modified this couplet for you to make sure that it's going to work as expected and I've included
it in the resources of the structure so all we have to do is download the zip and the resources of this
lecture and I have it downloaded in my Kali machine.
So I'm gonna go to my files and to my downloads and I have it right here.
It's called Hitch s.t. as hijacked the zip.
I'm gonna right click it and extract it here.
This is the folder of this couplet and I'm going to copy it.
And paste it in the correct location.
Where better cup loads couplets from so to go to that location.
You can either press control and El on your keyboard to open the path bar or you can press here and
press a forward slash again to open the path bar once the path bar is open we want to go to you as our
share better cab.
Couplets so like I said this is the default location where better cups tours all of the couplets.
I'm going to hit enter and as you can see we already have this couplet in here.
But like I said this couplet is buggy.
It doesn't work as expected so I'm going to delete it.
So right click move to Trish and I'm going to paste the one that I just copied in here so that's it.
We're good to go.
We can go ahead and use this couplet from Buttercup but before we do that I also want to go to my home
directory.
This is where I stored the couplet that we created in the previous lecture.
The spoof couplet.
The one that one the AARP spoofing command and then run the sniffer.
I just want to modify one thing in this so I'm going to right click it and open it with leaf pod and
what I want to modify is I want to either an option to sniff in here so as you know this line net that
sniff on will turn on my sniffer.
But before turning it on I want to set the net dot sniff dot local to true.
And what this option will do it will tell Buttercup to sniff all data even if it thinks this data is
local data.
The reason why I set this option to true because once we use the hash TTP as bypass couplet the data
will seem as if it's being sent from our computer.
So Buttercup will think these passwords belong to me to my computer and it will not display to me on
screen.
That's why we're setting it to true so that we can see all the usernames and passwords sent on the Web
sites that we will downgrade from TTP as to each TTP so I'm going to save this control s and quit it
control.
Q And now we are actually ready to go and use this couplet so in the next lecture I'm gonna show you
how to use this couplet to downgrade hasty CPS connections to a TTP and therefore be able to sniff your
ls the log in information and passwords that people enter on websites that use haste TTP s by default.