Hello, everyone, welcome to another video of our men in the middle attacks.
Today, we will see how to replace and fail with our payload using the file to replace plugging in better
cap.
First, let's take a look at the file.
Replace Ruby File.
This plugin you can download from the Internet, if you just type replace file, dot, RB, Google,
it will get it from GitHub.
So we're going to use this plugin to replace Aleksi file downloaded by the victim with our show code
or our payload.
So when the victim tries to connect to maybe a website like seven zip and try to download a file, we
will replace this file with our payload and get her version.
All right.
First thing we need to do is to create our payload.
All right, our payload is called show that the U.S..
OK, second step is let's prepare another show.
Here.
To listen for our incoming connection, go to open a massive console using the exploit multi handler
for this and our windows Metropia reverse to keep haloed, OK?
Leave this aside for now, the second step is or third step is to use better cap.
There's just proxy and we're using the dust as a proxy module and we're specifying our module dilruba
module replace file and then that dash file, dash extension.
You see, of course, you can replace it with anything else.
But in this example, we're using Yuxi and we are using the Dadush file that's replaced with our EXI
file.
OK, let's do this.
Now, here on our Windows machine, we're going to open a website.
Seven zip dot org.
Let's make sure we are getting this associated first, no.
Reopening.
All right, let's try again.
Yup, so here what happened is our script, our Ruby Fireplace module, it replaced this file with this
file, right?
So this is not seven zip actual file.
This is our payload.
If we double click on it, open it.
We got our version of.
This is a very dangerous attack, and the men will attack because the victim here doesn't realize that
the fire was replaced.
Of course, we can do this with anything else, like PDF or any other extensions.
All right.
I think that's it for this video.
Thanks for watching and see you in the next one.