Let's take a look on the desert before actually going into the hacking or recording section will cover
almost all of the attacks that is needed in order to be a proficient ethical hacker.
But for now let's take a look on this smart digital it will be only a part that we'll be covering for
the entire course.
So first of all you can see this is my colleague Linux which is the hacker missing and the machine that
I want to attack is the window missing which have these IP configuration.
So if you want to get the configuration you can simply type IP config.
And this is the IP address and the MAC address of the window machine that I am going to target.
And I'm going to use this A B framework for the Browser Exploitation.
And we are just targeting this browser which is Firefox which is installed on our windows missing.
So I'm just using some framework over here.
And this should be something that is unknown to you.
So it's completely fine.
We'll cover everything about this man in the middle framework in the upcoming lecture.
And I'm just saying that I just wonder if I'd be spoofing.
And after that I'll just say the gateway so gateway is the first subnet of the entire network.
And I say 1 9 2 168 dot one that one.
And after that I'm just going to give that target is our window muslin and we have seen the IP addresses
of window machine is 1 9 2 1 6 8 1 dot 14.
So you can also get using this common IP config on order in the machine.
And after that I'll just add the interface.
And in this case I have this double Len zero which is our interface and you can also get that interface
using I have config.
Come on on your columnist in any good seed over land zero is my wireless adapter interface.
After that I want to use this the idle argument and it should be something that is new for you.
It's completely fine.
I just want to give you a small teaser.
That's it.
So let's use the IP addresses of our limousine over here.
And now I want to inject that they use the hook Jesus over here which is the hook file in order to connect
with a dead windows web browser.
So what we just did over here is use this man in the middle framework to do this ERP spoofing and we
just inject these huge dodges which contains this Derby's good file which will connect our browser of
this college Linux to the browser of Windows which is our Firefox.
So let's it in.
So before that makes you that the IP addresses is completely correct and everything is fine over here.
So let me just hit it into and now our man in the middle framework is up and running you can see it
is online over here.
And next thing what I need to do is I need to go to the places where our web server is hosted.
So it is hosted in computer var w w w as dismal.
And it is inside this index start a stable file.
And let me just open opening the terminal and say nano index DOT estimates.
It is a way to dis a clique or basically open that file with a data which is narrowly detailed and you
could see we have injected.
This is good file which contained the IP addresses of Caylee missing and the hook dirtiest is hosted
on the sport.
So let's say this first Space Control or to save to suppress into and control X to exist.
Now our index file is ready.
Now what you need to do is simply open your browser on the window missing and go to the missing IP address
of Caylee.
So this is IP resupply legal.
So let me just get into it now.
Welcome to hacker world has been displayed which was the content of our index statistical file and you
can see we have connected to the Firefox of Windows.
So let's open the browser over here.
And now you could clearly see that we have here a new online browser which is this Firefox.
So now you can draw on every command that is available over here.
So let me just make some changes in this machine and let's get this Firefox idea so anything that I
just type or just pass come on that is going to be executed on our machine.
And let me say first of all I just want to get this alert box and I'll just keep some random information
you have been hacked and let's execute it and let's see if this gives all out masses over here.
And you can see we have this alert message printed in these gland machine which is our window machine.
So next I want to give E's let's say pretty tipped.
So this pretty tape is a type of attack which will this be specific to particular social media.
So I'll just stick with the Facebook that's executed then it is going to give us the information that
the Facebook system has time out.
Please enter your username and password.
And if I say that it's email dot com and if I see the password is 1 2 3 4 5 6 unless logging over here
and now we have this command and let's go to this command and you could see we have captured this email
and you can also see the password right here.
So next Steve can also command or execute all of this come on like a social engineering phoning up in
every command is there to be executed on this browser.
So I was just so on the last command and I'll see redacted will just execute so much of command in the
upcoming lecture but Alice this now execute the last here and I'll just say Twitter dot com and now
if I executed then it is going to give us a read Erickson to Twitter dot com and you can clearly see
our client browser has been rededicated to the dot com.
That means we have complete access to this client browser.
Now you can just inject some of the payload and some of that is reverse engineer toolkit or social engineering
toolkit to completely get access to that of claim to Muhsin.
So now we have seen how we can just execute the B framework and this is just complete TISA will just
completely execute all of these commands and we'll see how we can make our payload much more stronger
how to connect with them how to just create the backdoor so that we can get complete access to the client
too much in using the college Linux in the next section but for now you can see the completed or hope
B framework works.
Now let's see hope Titan will use to make the backdoor a reversal and connect to the client.