So girls in the studio, we're going to look at this as a tool.
So in previous years, we have seen a foot the traffic from the windows on machine by using the man
in the mirror.
So in this video, we're going to do the same.
But here we are going to remove this assistance from that website that when the sun is going to visit,
let's say, Facebook dot com.
So obviously, you cannot sniff the encrypted traffic.
You can spoof, but it won't be any meaningful to you.
So what we will do is after we're sending the request back to us, then we will use this as a tool to
support this assistance that we get.
And we will send only the GDP request to the server, that is Facebook account.
Now, Facebook will send and it should be proportionate to this mission.
So let's do that.
It's, uh, generally removing this that we've got so that so, uh, it looks like when someone has
asked for attribution of the website.
So let's go ahead and you need to, uh, fire up a browser and search for a search.
You get back to privacy and you need to.
I cannot open Google Chrome not because two or two machines are running.
It will hang up.
And also I'm recording.
So it could hang up my laptop.
Just you can get Carondelet.
That is the apostrophe.
So this is the sorry, uh, sister ship.
You can tell us now what you're going to do is you want to say bye, pip install.
When you are so twisted is a python module that will be required for this as a search tool.
So after you want to after installation are in your trees, python to set up to be installed.
So you need to run that python sort of that way.
And so to restore order or dependencies are now what we're going to use.
So we need to enter this quite so fast.
This is a basic Alperovitz reader comment.
I have written IPA, I produced a video, so we are just roping all the traffic coming from 80.
Coming to fro from the 80 to this one, two, three, four, four, so Windows seven machine will send
up for daily traffic.
That is a request to our machine of traffic.
And then we will redirect all the parties to the port.
One, two, three, four.
And at that one, two, three, four, we will use this as a system.
So let's first run this Ataka.
So, oh, accept this and let's find out the IP address I can answer to the maps can also take strong.
So this is the one, not one, so that's Gaudens, ScanSource, most ScanSource.
Now, the hosts and whatnot, not one is a target, one one, not one is Target two and then do the
of poisoning.
So this after our president has been successful.
Now let's turn to so she might turn to script A or B, right.
And minus Hej.
Oh, my research shows the helpage and we are going to use only one option, that is a good option for
those on the boat.
So Doctor Medical isn't on the boat and it was the incoming requests.
That's minus one, two, three, four, because we are redirecting all the traffic from Haiti to the
port.
One, two, three, four.
So we are we need to run this ship on this.
One, two, three, four, Hutner.
Now, the script has been shattered.
Now let's open up the browser and go to Facebook dot com.
So guess I'm going to use this Facebook.
So let's Facebook or Facebook.
So that's quick on this Facebook and you guys can see there is no certificate, you can see it could
be traffic.
I'm not Facebook dot com.
You can see the only plain text protocol history.
No, that's.
Artem.
No, I don't want this to go wrong with the passport so you guys can see there is a problem with this
request because, uh, there will modern websites, almost all the websites, uh, uses this justice
for that is issued to transport security.
That means the request only in the form of a TradeSports will be accepted like post.
We are posting anywhere to the server.
We will only accept the cheapest form.
So we are sending others GDP.
So in that case, this is, uh, this has raised an error.
Uh, but user has sent the credentials.
Right.
User has sent the credentials to this next machine.
You can sniff the wide shot against of the, uh, credentials within the workshop.
So but in normal scenario, world scenarios, most of the time it just stays flat.
So it's just if you if the domain contains a local server, uh, without a certificate, then you can,
uh, sniff the traffic.
Isn't this censorship?
So that often is viewed as censorship or you can use this in other domains.
But most of the modern sites, uh, you can just get the credentials from the user.
So obviously the user will think that these are normal Facebook compete and he will do the current credentials.
Uh, regardless of this, I repeat, what user can see there is a problem with the requests.
So user thinks that this is the problem from the Facebook Sarasate obviously we get the request, uh,
not request.
We can search for the credentials.