Welcome to this lecture.
Now let's learn another method to hook this line the browser to our calendar Linux.
And this is done by the ADP spoofing.
We have a line about the man in the middle attack in the previous lecture where we used to be in the
same network and we can execute that is our spoofing by getting the target.
And basically we can inject we can just get any information that is inside that man in the middle framework.
So we'll just make use of that because now we add is the intersection between the client and the router.
So we are just acting as a router here for the client and further out.
We're acting as a client.
That means any packet will go through us.
So that is the uses of a man in the middle because we are in the intersection part where this intercepting
every packet flew from the plane to the router so that any request that is done by the client is through
us.
And any response that is sent from the router is from us.
So what do you need to do is first of all open the B framework in this case I have opened it and we
have now the offline browser over here.
So what you need to do is now instead of just making that bids which is used to inject the code that
is this Who Code in the previous lecture we just saw we can just inject this script on that browser
and we can run it but now we are going to use that man in the middle framework.
Solis write that code.
We have already seen this code.
So first of all you have to use this man in the middle framework.
And after that you have to this use this argument like ERP spoof because this is the technique of a
peaceful thing and lists a gateway.
So if you see the gateway is the first network that is connected to these browser are basically that
is connected over here.
So if I just say I have config then this will be the IP address of the limousine.
And if you see the gateway is the first ip of desalinate or bicycle of this interface.
So that means it will be 1 9 2 1 6 8 dot 1 dot 1.
So this is the first subnet which is going to be the gateway.
And the next is to add the targets and should be targets.
So the targets we want to hack is the machine that is outlined must in 1 9 2 1 6 8 dot 1 dot.
It is 14.
So it could take the IP addresses.
So let me say it.
So it could see something that is IP config to execute and you could clearly see this is the IP address
over here and now and this is the gateway.
You can see the default gateway right here.
So the first subnet is your gateway which is the default gateway.
So after the targets you need to specify the interface.
In this case we're using the W land zero.
And now let's inject our payload.
So in this case the payload is going to be our Gs you Earl.
So let's make that what else.
So this and you.
So this this you at all is a Sim is here.
So let's go over here.
So this is example saying this is this TTP and this is the URL that we want to inject to that Web site
or any pages that the user is going to visit.
So let's say a city CTP and we have to now give the IP address.
You could see here this is the IP address of the colleague over here and the board that it is going
to listen.
And this is the hook dot just file.
So the IP address of my Muhsin is right here which is 1 9 2 1 6 said Dot wondered Levin.
So let's write that
so after that we have to specify the port and now hook dot.
This is the file that we want to inject.
So this is our complete payload.
And you could see where you're using men in the middle framework for this ERP spoofing because we want
this target to inject discord in every of the Web site that it visits.
So let's hit into and let's run this man in the middle.
Framework let's go over here.
So it is giving us some error.
So it is saying it has already been used and either maybe because so it is giving us some it also lists
rebooted
so yes I want to terminate
Okay let's open it one more time and it is the Linux
so killer let's run it one more time I was just rebooted so let's open this free framework again and
let's open the terminal where we let's write that code so here so I'll just write it down here so let
it first open the browser for us soulless log in first and then just write the code one more time.
So here what we're going to do is basically we have to write the man in the middle framework again so
man in the middle framework.
And this is going to be again the AARP spoofing
AARP spoof and the gateway
and the gateway will be 1 9 2 1 6 8 1 dot 1.
And again the targets overseas unchanged 2 1 9 2 1 6 8 not 1 dot 14.
And now the interface should be total land zero.
And I want to inject that these that you are a little bit here and it is yes you are.
And that is stored in this.
Yes DP and let's see here it is in the IP address obviously we are going to give the IP address let's
confront the IP address again
so Katy's not connected away.
So first of all let's go to the devices us to be and connect that external USP
and maybe now we're disconnected.
Let's take this here.
It is not connected yet.
Now it is connected
let's wait for the interface now upgrade clinics
OK disconnected now.
So this Stipe I can fake one more time and it is the same IP address 1 9 2 1 6 8.
Dot wondered Levin.
And I want to inject that is hook dot just file it made into
okay.
We had data that is this must be GSE url.
So let's go get here.
And this is it that because it should be double.
That's what we're here.
Let's it into again.
We had lived in this spoof so let's go one more time.
That's it into
our men in the Middle East is running but now we have to go to the client side.
And now in this case we don't have to open the you at all that is basically the server of the Khalil.
Next we can open any Web site.
Let me say Bing dot com.
This upon this being dot com and let's go back into the college Linux and let's see so we have now this
again the browser and you could clearly see now this is the host and we got back is this to that is
to the same machine.
Now you can again run the same command like the social engineering command which was the same command
and you could see.
Now we have this complete browser.
This is so this can be also done by this method which is this man in the middle attack.
So what we just did was we just made the use of this framework to indicate that this device could code
and basically we saw how this can be done in the previous links as to what in this case we are only
injecting DCU at all which is this you are all containing the Hoosiers in the website that we are visiting.
So this will be there for this lecture soon the next one.