So we have already studied about the other rededication in the previous lectures.
So you had to read Erickson was the exploitation of the excesses attack where user will thing they are
just visiting the genuine Web site.
But instead they will just say redirect to another Web site that can be the MLSE search site of the
hackers too and they will just harvest the credentials of the users.
So not only is the phishing attacks so first of all what is the phishing attacks or phishing is a type
of a social engineering attack.
That means it is the way to trick the people.
Often it is used to steal users data including the log in credentials and the credit card numbers.
It occurs when the attacker that is using the trusted entity dupes a victim into opening the e-mail
instant messages or the text message so that the user or the victim will think that it is a legit masses
but instead it will be the masses of the user which will just scrap the content of the malicious code
and the recipient is then tricked into clicking a malicious link which can lead to the installation
of a malware or freezing the system is a part of ransomware attack.
The revealing of the sensitive information which is the most of the case in the case of the excesses
attack.
So we can see that they exist this attack can be very dangerous because its exploitation can be the
phishing attack.
And we have already studied about the other rededication.
So in this link so we'll see about the phishing attacks.
So let's get into the action.
So we have opened above so.
So if you just remember from the previous Lexus we have made this BP which was vulnerable to and just
say hello here.
And if I just press go you could see it has been reflected right here.
That means this was the feel that is vulnerable so we can just throw on this script here and give some
of the masses is like this.
And if I just write on the script if I just suppress go.
So this response to the browser and if I just best in this go then you could see it has executed this
spell or that means it was successfully executing our payload which was in this case the simple script.
So we can see that the exploitation should begin with the shaking the axis.
So this was wonderful well that means we can now inject some more payload in this BP barometer.
But if you're just going this be bad image only in the P parameter and say something like hello let's
press go and if I just say s e e lo then you can see it has a reflector right here.
That means DSP also has the vulnerabilities are basically the a way to temper this barometer.
But now will only take what these people parameter.
So let's do something else in this BP parameter.
So if I just remember and what we did in the previous lecture we just make this you read Ericsson with
this simple payload.
But now we can do the phishing attack with another payload so that payload easier a frame.
So if you have a sturdy double life remedies used to give us some canvas or basically a frame where
you can this make some you are allowed to load in the Urals would be inside the CSR C attribute.
So I'll just pass something like as GDP give double calling in the most name others a bit for his tech
dot com.
And this is the link you can give height and weight so height is one barometer over here.
And it should be important.
So I'll just give hundred person days and not his word and it will be my hundred person days as well.
So up to use a sport height and weight you have to close these eye frame so as the sport clothing drive
frame.
So this is your way to this to make the phishing attacks so what we just did here was we just make a
frame inside of this Web site and this new Web site will just be in the hole up the window.
So let's see how this works.
So we just go to the burst and instead of the simple payload all this space did right here.
That is a frame.
So what we're doing here is we are just injecting the IV frame which will this make of feel in this
Web site.
Any to Lord this Web site instead of the genuine Web site.
So let me just press go now.
Give it time so it is sticking some time let's see this results in the browser.
Let's go over here.
Analysts vested.
Cool.
Let's say okay but it is not doing anything it is not reflecting.
So this should be some problems so it must be problem with this link.
So I'll just say something I've been dot com.
Let's see if this work or not.
So just copy this again.
Go back here less insect in here.
That is time frame analysts now.
So I just need to press go again.
And if this so response to the browser less blessed and go and go see now being will be injected inside
this Web site.
So if you see here the Web site name is disappears feeder v Illinois dot com but we'll see the big dot
com inside here which is due to this eye frame so Aegis injected Bing dot com inside decipher them so
you can just make use of something like Twitter if you want to this inject your clone Twitter it can
be Twitter clone are the Web site that you have cloned which will be hosted locally or globally if you
want and if we just good the birth suit again if this place everything from here that is diaphragm to
this new link if I with this place go if I see response to the browser so instead of this this paste
go again and saw a response in the browser let's see what happens here.
So you'll see now on the Twitter will be law data right here.
So it is not working because the Twitter must be asked to be yes maybe.
So let's see if this works let's copy this.
Let's go back to the burbs so less surplus this real quick Gold V less spaced less preschool.
Let's see response in the browser.
Best in go and again it is not working maybe due to something like EDP is saying let's see if it will
take time.
It must work but it is not working maybe something is happening over here listed for the hot.
So let's go directly to the bird.
So then let's see for heart mail.
But the simple is is it has to be a slice see.
Again the response in the browser is best in go.
And you should know what it is is not loading something is happening right here.
This stick again for the being
longer being is working for some Web sites that has this piece is not working.
So that means you have to work with.
Yes DTP now there is a TB as in the case of I does remember that.
So we'll be working on some of these you are to read Ericsson's Hostettler injection and some that Bonds
6 this is supposed exploitation attacks in the upcoming lecture.
So see you in the next run.