‫-: Hi. Within this lecture we're going to see how
‫we can do the ARP Spoofing, ARP Attack using Better Cap.
‫So far we have connected our USB Wifi card,
‫we started Better Cap, and we detected the target.
‫Over here we know the IP address, if I run help
‫I will see the ARP Spoof Module over here as not running.
‫Of course it's not running right now but we have to
‫start it manually and before we have to start it,
‫we have to know how it works. So what do we do?
‫We use help documentation one more time and we are
‫going to have to of course specify the target that
‫we want to attack.
‫So I'm going to say help arp.spoof and it'll just
‫show me the documentation of the ARP Spoof Module.
‫As you can see there, simple comments like ARP spoof
‫on ARP spoof off, but also we see the ARP ban on.
‫Ban means it, it attacks with the authentication module.
‫So it's makes the target lose its connection.
‫So it's a cool story, it's a cool module as well,
‫but we are not interested in that.
‫We don't want the we don't want Target to lose its
‫connection.
‫On the contrary, we want the target to be connected to the
‫same network so that we can spoof it by using ARP spoofing,
‫okay? So we have different options over here like ARP spoof,
‫full duplex, ARP spoof internal ARP spoof targets,
‫and white list.
‫So we are gonna have to make sure that we
‫adjust them correctly, otherwise it won't work.
‫So if you come over here and look to ARP spoof full duplex
‫it says that if this is true both the targets and gateway
‫will be attacked.
‫Otherwise only the targets will be attacked.
‫So if you remember the chart that I have shown you
‫we have to attack both the gateway, gateway means the
‫router, and the target in order to be a man in the middle to
‫get the information from one side and forward to
‫the other side.
‫Otherwise, it'll be a one way show.
‫So maybe we can get the requests, but we won't be able to
‫see the responses and visa versa.
‫So make sure you change this to true, okay?
‫Otherwise it won't work as you might want it.
‫And in order to change a parameter in Better Cap we always
‫use the same syntax, same writing structure.
‫You write sets and then the parameter that you want to
‫change and then the value that you want to assign to that
‫parameter.
‫So in our case we want to change ARP spoof full duplex
‫parameter, and we want this parameter to have the value
‫of true rather than false.
‫So I'm going to write set arp.spoof.fullduplex and with
‫a space true, okay?
‫And remember this structure because you will use it
‫for every parameter in Better Cap. This is how it works.
‫Set ARP spoof, full duplex, true, and now it's done.
‫And the other thing over here is the ARP spoof internal.
‫As you can see, it says that if it is true the
‫local connections among computers of the network will be
‫spoofed, otherwise only connections going to end coming from
‫the external network.
‫So most of the times you're gonna have to try if this
‫works or not. So default is false.
‫So I generally leave it as false and try if it works or not.
‫And if it doesn't work, I, I try with set arpspoof.internal
‫too as well, okay?
‫So you know how to change the parameters like
‫set ARP spoof internal true, set ARP spoof internal false.
‫You can try this on your own. I'm gonna leave it as false,
‫and I'm going to move to the ARP spoof targets because
‫that's the thing that we should not forget, right?
‫So we are going to write set ARP spoof targets
‫1 9 2 1 6 8 1 28.
‫And since we are seeing targets not target, we can actually
‫have multiple targets over here.
‫You can just put a comma and then write whatever
‫IP addresses that you may think of, like if they're
‫on the same network of course, and try attacking all of them
‫at once and try to gather information from
‫all of them at once.
‫So once I do that, as you can see, I, I detect my target
‫and I lose the connection to my target sometimes over here.
‫Make sure your target is detected by the Better Cap
‫and then start the ARP spoof.
‫Like I have started A, ARP spoof by saying ARP spoof on,
‫but if it loses connection I can say ARP spoof off.
‫Then again ARP spoof on to make sure this is working, okay?
‫So it, if it loses connection like this and the
‫ARP attack will end.
‫So make sure your target is connected to the network
‫and make sure you run ARP spoof.
‫After you run help you will see everything is running,
‫but not this net.sniff.
‫Which is the module that we should run in order to get
‫the information and show it on, on our terminal,
‫and we are going to say net.sniff on.
‫So we are gonna stop here and within the next lecture
‫we are going to see if we can gather information from our
‫phone while we browse the internet, okay?
‫Let's see in the next lecture.