[Autogenerated] if you found the previous demo interesting.
I want to show you some other ways of getting even
more credentials using the wife.
I'm punking.
Let's hear now Red Team engagement and you got access to our internal network.
So then, as it explained before,
when you create a fake access point wife are bumpy,
we will redirect out the traffic from the WiFi users
to the Ethernet port or for laptop, which is connected internal network.
And this means that for all the WiFi users on your network,
when they try to access service on the Internet,
all the traffic will go through your machine,
and this allows us to easily eavesdrop all the traffic.
Now let's go back to color Lennox, so I can show you how this works in here.
Already.
Have one person connected my fake access point,
and you can see that in the bottom right of the screen.
Or you can go through option the station monitor.
In here, you can see the Mac address off the person connecting my WiFi,
and because this person is connected to my wife,
I off the traffic off.
This person is going through my laptop and this makes
it easy to eavesdrop the traffic.
So let's open a warrior Scherick.
If you're not familiar, Where shark?
A direct command.
You studying it?
It is a tool that allows you to see every single
packet in all your network interfaces.
As you can see here, I have to maintain faces the E th zero,
which is the Ethernet port connected internal network,
and a Dublin port, which is my WiFi card,
in which people are connected to just get traffic for one of those ports.
I just have to double click on it.
In my case.
Oh, double click on the W Land.
Since I want to see out the traffic that is coming from my wife,
I users awesome.
Think a look.
We can see how to track for this WiFi network.
In here,
you see tons of encrypted packets as well was
ordered not so interesting packets,
but let's see if we can find something interesting here.
One thing we can do is to search for insecure protocols such as http
FTP and telling it those first calls are transmitted in plain text
mean that we can easily eavesdrop on them two fugitives packets to
see only a chubby traffic.
Our jobs go to the future bar type HDP and presenter Perfect.
As you can see, where shark futures tow us to see only the HP packets,
those packets are turning an encrypted,
meaning that we can see what's being transmitted.
One interesting thing to take a look.
Our posts requests.
And that's because looking pages usually used this type
of requests to do authentication.
So let's investigate this post request.
Here we can see tons of for information about this packet,
such a source destination and even the browser that person was using.
But interesting part here is this less one.
The HDP form details.
If you expand it,
we can see that this page send two variables of you the post method,
one for username and one for a password and take a look during plain text.
Pretty cool, right?
And that's why every recommends using https instead of htp and believe or not,
Ah, lot of legacy systems such as Internet systems is to use an HP instead of H.
P s, which is good for us.
It becomes a real easy to get credentials