Welcome to this lecture.
So in the previous leg so we saw we were successful to inject the GSA well to other web or basically
to the website of a client.
But we were unsuccessful to get this screen sort or basically even the key logger so you could see we
get this exception saying that it is the exception in the hook to fund sin and something juries like
to here.
We don't want to read it but it was because we didn't install one PAC is so it was because the one PAC
is installation error.
And I want to cover that in this lecture because we will have to do that two things in this lecture.
That is the taking these screens out and injecting the key logger and the previous lecture was already
a longer lecture so I wanted to cover in the next part so here we are.
So first of all what you need to do is you have to see the python so python is already installed in
my case it is two point seven point fifteen.
So you'll also get some information about here because python is pretty installed in the case of Linux.
So after that what you need to do is you have to install Python packets and it should be done with these
people install and it is that twisted back is.
And as you see the Virgin over here is fifteen point five point five.
So let me just copy here because I have just let me paste.
Basically so this is our installed voice and fifteen point five point zero.
So you need to install this.
So if I just seed into in my case it has already been installed.
You can also install it with this command if BP is not installed it can be done with these titanium
pip install.
And it is twisted and it can heat into it.
This download that twisted back is.
So now we are ready to inject that payload or it is screens start basically to our client Amazon.
So let me just clear this.
So now what we need to do is many in the middle framework obviously an ERP spoofing every spot.
And the gateway you have to specify the gateway here.
I want to say that it is 1 9 2 1 6 8 1 1.
This is my gateway.
Less is specified.
These are targets.
And here it is 1 9 2 1 6 8.
Dot wondered for this.
This is my IP address of window missing.
After that what you need to do is specify your interface.
In my case it is a wireless adapter of land zero.
Now if I see a screen this is going to just get these screens out of the client once in every 10 second.
You can also manually specify something like 5 and seconds something like this but I'll just stick with
our 10 second analysis internal and if I hate into now man in the middle framework is running and let's
go over here unless this is my window machine.
So in the Firefox let me just run this and you can see now here it has shown that in the Linux it has
injected this GSM payload.
You can clearly see it and also given us this saved screen start ups and you can also see it has already
served to screen start for us.
It has saved this screen start over here with this name and everything.
So let's see.
This is the screen start.
So in order to see these consorts you have to first go to the places computer it is inside this var
and you have to go to the log and after that list source for man in the middle remote.
And it will see all of the risk insert over here.
So this is the same skin so that we're talking so you can see this is one is concerned and it has a
stick and a bunch of his can sort of way.
So this is all about this is sort of good see it has saved this is skin sort and it has also injected
just below.
So this is the way to use man in the middle framework arguments.
So next thing also you can do is let me say man in the middle framework and help you could see we have
these key logger right here.
And you should be looking at where it is
maybe these down here.
So you could see that we will have now GSK logo.
So I didn't find it.
Maybe it is right here indicate this key logger.
So it will just load that plug in this key logger and let's use this now.
So it is same way.
So man in the middle.
So instead of writing again I'll just use this and instead of a screen I'm just saying this key logger
is Dobson.
Now you could see the same.
That is command over here till this interface.
And after that we'll just inject this over instead of the screen command.
So let me hit into and let's see if we have any there or not.
So let's go back here and let me see.
I want to say use a name and let's go
and you can clearly see it has got so many information so it was OK so it got so many of promise and
this is basically regarding to the Web base so you could see that we had passed user name so this very
hard to find there.
So let's go back and let's say hey or something like this.
So if I go back it has indicated that this file obviously it has shown here that it has the GSK logo.
Let's wait for some time and again it has given us a bunch of information over here.
So you have this information and now it's very hard to source for that this key logger operation that
we just got from here.
So you can see that we are successfully injecting some of the command that is given by this man in the
middle framework.
But you need to have these back is that it is still otherwise.
This is not going to work.
So this will be there for this leg so we saw how to use the man in the middle remote how to do this
ERP spoofing with the help of man in the middle Primack.
So this will be that for this lecture soon the next one.