We have seen the theory behind the man in the middle in the previous lecture.
Now let's see the man in the middle attack in action.
So first of all you will this open the terminal and let me resize it.
Now this man in the middle free mode does not complete install on the color Linux.
That means you have to install it manually.
But before that we have so much a package.
We can also do this ERP spoofing.
So basically what happens is where this is spoofing the MAC addresses of the client to our mac addresses
and we have seen that in the basic 636 and how many in the middle.
But you can see this technique is called ADP spoofing.
So you can also do this technique using the HP spoofing which is normal technique.
And next is using the man in the middle framework.
So ADP spoofing can be done without Sterling any PAC is bought.
If you want to use a man in the middle framework which contains so much a payload you can run after
users perform the ad free spoofing.
So we'll just see that the promo code by here which is the man in the middle framework.
So before that you have to install that.
So first of all let's update all of our sources.
So let me say app to get update.
Now this is going to take some time and obviously I had not updated my sources.
So let's give it some time.
So let me just pause for a moment.
Let me just so wait for a moment.
So let me just budget over here and I'll just get back to you after we just updated.
So I have already updated.
So next thing is to install that package.
So it is done with the abdicate install.
OK.
I just to the end over there.
So I get installed and the framework is man in the middle free mode.
So if I hit into so make sure that before it you have to just update your package and it is showing
me that man in the middle framework is already the newest version.
I have already installed man in the middle framework.
But in your case you do this install it with a subgroup some of the packages and you will do something
that is saying that mean men in the middle framework has installed under my scene and you are good to
go.
So we have already seen how this man in the middle framework works on the telly.
Let's see how this works on these Kali missing.
So the basic theory over here is we'll just make changes on the client must missing MAC addresses.
So with us doing is ADP spoofing we are just sending the MAC addresses up client to that MAC addresses
of Caylee missing so that every package is that is sent or request from that client to the router is
done from us which is from the Caylee missing.
So let's go over here.
So we have this here.
And let me just clear here.
Now let's use that man in the middle framework which is this man in the middle framework.
And first of all it is the ADP spoofing.
So I am just saying it is they are peaceful.
And the next is getaway.
So getaway is first subnet of your network.
So let me just open the new terminal and if I say I can fake this is going to give us the information
of IP address.
So first subnet in this network is gateway.
So that means 1 9 2 1 6 8 one dot.
So I told you that first subnet.
So first subnet is 1.
So this is your gateway.
So next thing what you need to add is your targets.
So the set targets so if you don't add this target it is going to this Arby's on every match in that
is connected to the network.
So we want that that the targets would be specific.
That means we are only targeting to one machine.
And in my case it will be this machine which is a my this window machine.
So in this window machine I'm just doing that is I can fake IP config not I have it is IP config and
you see this is the IP address of these window machine which is 1 9 2 1 6 said Dr. wondered 14 to 1
6 said dog wandered 14.
So it is IP address which is the target.
So next thing is the interface and the interface here is w land zero which is my network card.
So now it is the command that we are going to run which is the I are peaceful come on with this man
in the metal framework and with this spastic Gateway which is the first subnet of this network next
to the target we want to this target this window must see nobody here.
And the interface is total and zero so let me just hit into now.
And now our men in the middle framework is up and running.
Now let's go over here and let's me you that this eater is the MAC addresses of our limousine.
So you could see it right here if I just press I have config it is going to give us the MAC addresses
of this car limousine.
Let's go to our window machine now.
So this is my window machine.
So what am I going to do in the here is I want to least.
That is our table.
So in order to list that we have this error be a command which is where all and fade into now.
It was something before that the now MAC addresses was something different.
But now if you clearly see in these Internet SS which is our interface this is showing that the MAC
address is right here so you could see the interface had changed the IP addresses and it had changed
this MAC address is right there.
If you see with this our table that the MAC address is this MAC addresses is not the ordinal MAC addresses
of these windows but this MAC address is the MAC address of Kali.
So let's go over here and let's see right here and let me just open the command prompt.
Then you could compare this is a macro basis which is right here.
So we are successfully sending the MAC addresses which is of this window missing to the MAC addresses
of these columns and that means anything that is parsed or packet.
Basically we have a little tool in the from the bill we selected that packet is sent from the source
MAC address to the destination MAC address.
So we are now saying that send that packet to us not directly to the client.
We're saying there send that back it to us first.
We'll just analyze that packet and we'll just send to the client because now we're just doing is our
spoofing where it's sending our MAC addresses of this window to our window that basically to our columns
in.
That means Packard will be sent through us so that we can analyze every packet.
So now anything you solve on that window missing will have the information printed right here.
Let's see if this works or not.
So I'm just using firefox in my window missing.
So first of all I'll just use the some Web site.
So let's open this and this is my Web site.
So let's go back to this muslin which is our column missing.
You could see the information that is printed right here.
So it is surfing France Nepal which is obviously correct because I have this source over here and this
is the information that we just printed.
If I say the user name maybe so and the password is also Sachin the endless logging and lists go back
to our column missing and let's see if this gets us anything so it has not captured anything.
And that is because we are not going anywhere from this site.
So if we just redirect to any site that means it has some problem with this link.
So let's test for our next Web site.
So let's test for this Web site which is the test Web site.
So if I just SaaS here something like Ares and if I just press go let's go back to our colleague missing
and you could see now we have this posted data right here and the Post data is for this Web site and
we have source for the Arts which is perfectly correct because we were starting we were writing something
over there.
So let's start for another site lists go or basically we'll just go to the sign up and let's see here
the user name.
Let me say OK.
It is my user name and I want to give the password also Sachin.
And now let's log in this then let's go back to our car limousine and let's see over here that it has
again the Post data with this Web site and the user name is sets in and the password is also sets in.
So we have successfully kept setting the data but if you see it is not the website for the yesterday
piece it is only for this.
Yes the DP So there is no encryption whatsoever but in this search.
So let's test this for maybe Google and list source for something maybe.
Let's say I want to source for cricket or something like this and go over here and you could see nothing
right here.
You won't get anything that is with this yesterday obvious connection or basically you can see that
is locked icon over here.
It is suing us.
It is a secure connection.
And obviously this is the security connection and we didn't get any information that deals with this
yesterday Piers over here.
But we'll see how to just crack this and it just see you the SSL is streamed come on and something like
that in the upcoming letter and we'll just see how men in the middle Primack gives us our tool that
can be indexed on the client and do multiple stuff.
So that will be covered in the upcoming lecture soon the next one.