‫Instructor: Hi.
‫Within this lecture,
‫we're going to see the different tools
‫that we can use in order to be man in the middle.
‫We're going to install the real tool that we're
‫going to use and we're going to learn how to use it
‫in order to have an ARP attack on the target.
‫So first of all, make sure your phone, your device,
‫your Android or iOS device is connected
‫to the same network that we connected with Kali Linux.
‫For example, in my iPhone right now,
‫I'm connected to the Home router over here.
‫So if I go to Settings, okay,
‫let me show you what I mean.
‫If I go to Settings, if I go to Wi-Fi over here,
‫I can click on the blue button,
‫the Information button over here,
‫and I can see my own IP address.
‫As you can see, it's 192.168.128.
‫Okay?
‫So this is the same network with the Kali Linux.
‫So I have 192.168.124 in Kali Linux,
‫which means that I can actually do an ARP attack,
‫and be man in the middle to this phone.
‫Okay?
‫So make sure your phone is connected,
‫or your device is connected
‫to the same network as Kali Linux.
‫So that's all you need in order to be man in the middle.
‫You have to be on the same network.
‫Since we are on the same network,
‫I'm just gonna go over and tell you the different tools
‫that we can use in order to have an ARP attack.
‫So we have several options for that,
‫and I have tried a area of them.
‫So let me change my keyboard,
‫because I'm using a Turkish keyboard right now,
‫and I will just write the names for you.
‫So if you got the complete Ethical Hacking Course from me,
‫you know most of these tools,
‫because we see each of them in that course,
‫because it works much better in the computers
‫rather than mobile devices.
‫But again, it works in mobile devices as well at some point,
‫so we're going to see it over here as well.
‫So we have ARPspoof, Man in the Middle Framework,
‫Ettercap and Bettercap tools over here.
‫ARPspoof is the most basic one,
‫it just does an ARP attack, but it doesn't get us datas,
‫it doesn't show us datas.
‫And it works most of the time,
‫but it is a very actually simple tool that you can use
‫on the side when you're trying to do something else,
‫rather than being man in the middle and getting the data.
‫So Man in the Middle Framework is very good,
‫but it's very old.
‫It hasn't been updated for like two years.
‫So it leaves us Bettercap and Ettercap.
‫So we're going to use Bettercap over here,
‫because it's the most innovative,
‫and most latest up-to-date tool that we have right now.
‫So make sure you run this apt-get install bettercap.
‫Okay?
‫If it asks for some permission, like Yes or No,
‫just give it Yes.
‫It will install the tool for you.
‫Okay?
‫So it's that easy to use it.
‫It's actually very easy to use as well once you install it.
‫It's not the case with Ettercap, for example,
‫it's very hard to use.
‫So we're going to use Bettercap for this purpose.
‫So in order to run the Bettercap,
‫all you have to do is just run bettercap -iface,
‫which is interface obviously.
‫And then you're gonna have to specify
‫your interface as WLAN0.
‫So if we were doing this on an wired network, for example,
‫we can use, we could have used ETH0 as well,
‫but since we are attacking the wireless networks,
‫or attacking the other targets using wireless networks,
‫we're going to use WLAN0.
‫So if you run Help, once you do that,
‫you will see all the instructions,
‫and all the modules that you can find in the Bettercap.
‫For example, we can see the available comments for you,
‫and Help actually is a very good resource in Bettercap.
‫It's not like the standard Help documentation.
‫You can see everything over here.
‫And we have a lot of modules.
‫We're gonna see the most popular ones and as you can see,
‫only the events.stream module is working right now,
‫running in the background.
‫So this is to keep track of what's going on
‫inside of the tool.
‫So it runs every time.
‫You don't have to start it or stop it,
‫but we're going to have to work with the other modules.
‫And in order to do that,
‫we're going to have to learn how they work.
‫So first of all, we're going to start with net.probe,
‫and net.recon.
‫So this is to discover the other devices
‫in the same network.
‫So suppose that you're connected to some restaurant Wi-Fi,
‫and you need to find the IP addresses of other devices,
‫this is where you run net.probe or net.recon.
‫So if you run help net.probe,
‫it will show you how to start it.
‫Okay?
‫So it's very easy.
‫All you have to do is just say net.probe on,
‫and in order to stop this, net.probe off.
‫So once you start net.probe,
‫I believe it will automatically start the net.recon as well.
‫Let's try this.
‫I'm gonna say net.probe on and hit Enter.
‫Here you go.
‫It already detected some other devices
‫on the same network like this, as you can see.
‫So even though I showed you the IP address
‫of my iPhone device like 192.168.128,
‫even though we didn't know that,
‫we could have gotten from the net.probe like this.
‫So we see my phone over here, 192.168.128,
‫it's been detected by the net.recon.
‫And if you say net.show,
‫it will show you the available IP addresses,
‫and some vendor information in Mac addresses as well.
‫As you can see, sometimes,
‫we lose the devices on the network,
‫and they got reconnected like this at some point.
‫So whenever it's connected,
‫it appears in the net.show table.
‫Whenever it disconnects, it doesn't appear.
‫So make sure your target is connected to,
‫or it's detected by the net.probe or net.recon,
‫and that's how you get the information about your target.
‫Okay?
‫Of course, you can try this with computers as well.
‫It works much better in computers
‫than it works in mobile devices.
‫However, this is not the point of this course.
‫Okay?
‫We're focusing on the mobile devices,
‫so I'm going to do my example on my iPhone,
‫and I'm going to show you how it works,
‫and how it doesn't work sometimes.
‫So we're going to stop here,
‫and continue within the next lecture.