Hey, Lou, everybody, welcome to my advanced ethical hacking, networking, penetration testing calls.
As we have talked earlier and the previous videos, so we have showed you how you can make a connection
or form your browser and with your purpose with so that we can get a HGP s connection.
Well, what now?
So we can use burb street but are going to choose a very well-known tool, which is Itoh Cup, so that
we can make an IED attack.
So what is it?
My team attacked.
It is the abbreviation of the main in Dimitar attack.
So what is it?
So if this computer is sacred, you secure, you get to know our whole.
You will click.
You got to know how you enter your credentials because your device might get secured by a very well
set of firewall or or antivirus and stuff like that.
But you you ignore the principle, the principles of security, then I'm telling you.
So you will get into trouble, because the first thing first, the security is how your mind is set.
Well, when you are on your computer, if you don't care, you were trying to click on everything without
tweeting or you trying to enter your credentials without having a good look on the protocol.
So I'm telling you.
So you will get into trouble.
So I will show you how I will make an attack to this computer, my Mac operating system, using my Khaleel
Unix machine.
And then even if this computer is secured, but if I will ignore that and pretending that I will enter
my credentials to some Web, to some Web page.
And then therefore I will get infected by this attack.
OK.
So let me show you.
So as a first thing first, before entering the particular port as its name, say, men in the middle.
That means I'm placing my Ledo Sohn as an attacker between this computer and between my attacker machine.
Therefore, I'm sitting between you and between me.
I mean between you as the victim and between the attacker.
I put my zombie.
Oh, I put my whaleboat or I put my camera.
I put my everything in the middle.
And in the middle of you and I, they'll fall.
I can read what you are trying to put on your computer, what you are typing.
If you go to Facebook, I will see.
Aha.
You went to Facebook.
If any Facebook is interested.
Is.
But I will see that you go to Facebook when I will use my tools and Karlee machine.
So we will show you how to use that.
How to use those, those tools so that you can perform this kind of attack.
OK.
First thing first we are going to arrange or attack a machine.
So we go in to sort of reach roadblocks machine.
OK.
So we go click here to start it.
OK, so this is all previous work.
So it was sent.
So it can just minimize it.
So it's it's program.
OK.
So let's minimize them.
We don't need it.
And this is.
It does not.
We don't need it.
OK.
So first thing for us.
The tool we will use in Tiny Machine is named as etre.
Cup after cup is a very well known tool to perform in demesne in the middle attack.
So tough to start Lubutu application.
Who can just open your terminal?
Let me show you everything for us.
So you you double click or click and choose terminal and you can type it later a cup and meet your cup
in minus G.
Just open it.
But when I go into as many dominoes, because we will of course use two or three morto.
I mean also let's just go here to application applications and staffing and spoofing.
It is.
And we chose it.
Ithaca.
Okay.
So before we have to defeat you, click on unified sniffing.
Okay.
And then the ITO, we choose it.
If your environment is as itoh and then how will you know your environment to know that you open a new
terminal.
And then your your type.
If I don't or so and stuff it.
Okay.
Here.
This is mine.
They'll fall here as the attacker matching.
You will choose this one.
You can click to see mortician's.
So what.
We don't need them because we have this as being or interface.
All right.
So you can click.
Okay.
Now it is unified.
What we can do and therefore so we don't need this terminal anymore.
You can just leave it here and then we will perform here.
Okay.
So what I can show you.
I will.
Sure.
You determine all of them of the Mac machine.
Okay.
Now let me show you.
And tofor is that all warm or Mac machine is.
So let's stay pig.
So let's check it.
Let's check it out.
So it has this IP address.
And then it is on interface E, N, Z.
Okay.
Now we have started.
We are unified.
So what we can do now, we can check how many devices are alone.
Also I mean our in our network, not on it.
And in the network that we are connected.
Be killed for.
We have to be aware of that.
That all attack machine is on which attacker network which would so that it can get this IP address
one nine two six one six eight.
It has to be.
Which hail.
So we can check it out.
Let's see with the moment on network.
It should be.
We unwaged add up the network.
All right.
So now let's go here.
So what we can do now.
So let's go.
Here we go back.
And now we're going to start to sniff or to look for the devices in our environment.
So to do so, we're going to click here on host and then we scan for hosts.
So K.
OK.
As it says that we had six hosts added to the host list, so we can go here now.
Click here on the hostages.
So we will put all men in the middle.
We will put our little men between the gateway.
I mean, we didn't do Walter in all of these devices.
So we're going to add the Walter IP address as being the target one and all of them you as being the
target, too, if you want to know which IP addresses, which devices they are.
So we can type, as we always showed you and mom and mouth and my nose scan network.
And then you put the IP address of the WOLTER one six eight one and one one Solash 24 and then you just
whereas.
So that we can see which which which device belong to which which IP address.
OK.
So we click here and we added here so K and we click here and new police chief so that we select Boler.
And then we add them as being the target to profit.
Now you can just press enter if you want, but he it's not required to do well for these parties, but
just in order so that you can see.
So what percent are.
All right.
You they are gays, you know, so.
OK.
So now it's time to start or attack.
But before that, we have to find a way to monitor all the attack.
So we will use for this DCP dump.
If you want, you can use.
What a shock.
It's not a problem, but.
But for this city to go, we will use DCP don't.
So that we can monitor what the victim is is doing on his computer or on his device.
All right.
So to do so, the first thing for us.
Let me briefly explain how it would be so we would click here on M80 m and then we will start the LPT
poisoning attack.
They'll fall after that.
We will use the TCAP Dome so that we can monitor what the victim is doing on his Web browser or on his
device.
Okay, so we click here to start the attack.
We click here IAP and then we choose sniff, we connection and then we click, OK.
Case to started.
Okay, now let's talk it or DCP dump so we minimize it if we want.
Okay, but before we start this, if you don't, we have to make sure that all IPV fall is setting is
set on to to do so or to check that or to check it.
You have to type cut and walk and seats and net and then you tie IP, let's say IP and you can pay stub
to see which option.
OK, which is the fourth one.
And then.
Yeah.
So what next.
So again we're stuck again and again.
One hundred twenty two.
No we don't need it.
So let's set IP.
IP followed, then replaced Endor.
And then after we can start or disappear, dump comment.
So we did.
Followed by sintered that against me.
Lou.
Oh, we don't call.
Okay, so.
Okay.
Now it is said on Zuhal two city two on one.
So you have to type a call one.
And this now four C's nipped a, b, B for a leap forward.
And so it was under issue B, the modern.
And so, again, you take this.
OK.
Now it's set up on one now so we can try to type or simply dump.
So to do so, we take DCP down.
And it was minus I, which means interface or interface.
When we checked, all I, I, I f confidence was on 80 h each zero.
So we type minus i e pretty is simple.
And then minus N and the code for the pod is 80.
And then now we're going to type the IP address of the victim.
So we can choose a new one of all devices.
Which war.
Which are here.
But as we have seen in I've I've config here or on or Mac address the Mac, I just IP was on one one
two.
So we're going to choose it.
Okay.
Oh my.
It is getting hit.
So.
Okay guys, just follow me.
I would minimize it and just follow me step by step, step by step on what I'm going to do.
Okay.
It's just I mean.
Again, this is so different.
Oh, this is not secure.
It means that.
So you said, well.
Medicines it.
Something that you are going to push for quitting, Charles.
So let's go on strike.
It could come.
Depicting gold to is.
The reason it took up is not able to get defrays because chose.
That's because it can kept choo choo the kitchen, which is not include.
So you in person in some specific website as you have chosen that area.
This Web site.
Let's go back this one.
So let's say we are going would do a thing.
One, two, three, four, five and 10 percent focus and go back again and again and they'll focus.
We will get it because it catches catch it as 16, you see and see how it works days.
So, yeah.
OK.
So, no, again, it's.
Let's see.
Good.
So there's some controversy.
Eh, I'll be at Texel for some times, it might you might know only once or for to proceed to the attack,
but it doesn't exist only once after, for example, we have used it for a cup of tea.
She's very well-known on unclearly nukes.
But you might use also Cain and Abel to make an AARP attack and or D.
D any attack free sniff attack and netcode attack.
And so, as we have seen earlier, how the attack is working.
So you might ask yourself, so how can I detect these kind of attacks?
Or if it use Windows operating system, you can use your common point.
And then by typing A, B minus A, I mean minus all, and then you present it.
Therefore you you will see that the IP, the Mac address of the attacker now is combined, which your
IP address.
Therefore, if you knew your Mac address before.
So you can know that I'm getting affected by by a man in the middle attack because the IP address of
the.
Off your victim machine now, combined with the Mac address of the attacker machine.
So what kind of software you can use to to mitigate, not yet mitigate to detect this attack?
So if you have a small network environment, so you can use some comments manually on each of your device,
but sometimes if your IP or devices, if the IP of died of your devices are static.
So it's better to do it manually.
But if you have a dynamic IP address generated from a D.H C.p server, so therefore it might involve
a little more work to do.
OK, so some counter measures, scenes, AOP spoofing, exploit the address resolution protocol, all
IP v4 network networks are prone to attack of this kind.
So the implementation of the IPV six was not really unable to serve this core problem because the new
IP standard we knowns stender, we nonces a IP and instead a controller controls the address with Audition
and the Alien via NDP.
When I mean NDP, it's Nebo Discovery protocol.
Okay, so the security gap could be close with the secure network discovery protocol, but you might
use some kind of software like intrusion intrusion detection system such as Snod can be used to monitor
or address resolution of it will be and AARP watch AARP Quad or X Arpey.
This kind of software might be used so that you can control or monitor what was going on on your network.
If you get attacked by some kind of a, I'll be poisoning.
All right.
So if you want to see someone for Machine about a LP watch or a LP groud X LP, please check to define
that.
We provide you.
And do we souce the fighter so that you can read it by yourself?
Some the intrusion detection systems, not also opioids using an integrated it, are pre spoof paresis
or which enables it to monitor data traffic in the network and manually compile a comparison list.
But this is comparatively expensive.
And the X o piece software relies on both active and passive modules to protect the network from IP
smooth spoofing.
So we are not going to talk much about it, about it, guys.
So we will provide you all this information and the resource file.
So you might check it out by yourself.
One thing you have to be aware, you have to understand is proofing process.
It is going to be and in a ways to protect yourself from a poisoning.
So before you can identify and prevent a full scale spoofing attack, you need to understand the process
and what to look for in order to commit a future event.
When an attacker when an attacker sends a first AOB message over a local network, they are then able
to link to your Mac address with the IP address of a legitimate computer or server.
And we already they are connecting to your IP address under money, shows pretences and can start receiving
data that was intended for a seemingly legitimate IP address.
The proposal is to identify when an IP address is falsified and what that a hacker or that attacker
is doing on your network.
You can look at abnormal activity on your server or in your devices and try to do to mine or what information
they are grabbing.
So this can also give you clues as to what type of threat they might get or what kind of data might
be vulnerable to any sort of attack.
And so when you identify a spoofing attack, once you figure out how it obree spoofing works and what
to look for, it's also crucial, imperative impure Eve to identify what kind of attack is targeting
your devices or to each LP spoofing event follows a similar attack process.
They can vary in how they can access to devices.
All right.
So we've got to use that resource, at least the three main spoofing attack attacks to look out for.
The first thing first was dinner or service attack.
And the previous video we are we have showed you how the denial of service attack or DOS attack or the
distribution dinner or service attack, August.
And then the second one is decision hijacking.
Since inception, hijacking attacks can use a OPIS spoofing to steal decision I.D. and opened the door
to your private data.
So that's why it's it's crucial for you as being an administrator or a developer programmer so that
you set a one time sition, a one time position, one time position means that you get used to two times.
So this is why using public Wi-Fi in an airport or zone somewhere that can create a vulnerable situation
for your data.
So the men and women in the media attacked women in the media attacks.
How we have showed you in all cremations.
We have used a spoofing to intercept the incoming traffic.
I mean, the incoming traffic for a illegitimate user ID modified gate in.
He failed to gain access to decision, mostly when the information or the data which was sending on
a particular Web page.
They are not encrypted.
Therefore, if there exists a man in the middle so it can get your information as a plain text.
This is very crucial to understand how it works.
So once you know what kind of attack you've been hit with and what's going on on your systems, you
can do to mine.
Therefore, what course of action to take or how to barracks if God your devices and data.
And so you might say to yourself that you are relying on some future private networks.
This is a good aidoo, a good step you can follow as well.
So you can use a static AOP and you can get a detection tool even even with a big knowledge, EOP knowledge
and techniques in place.
It's not always possible to detect a spoofing attack.
Our crews are becoming increasingly still iffy at remaining undetected and used Newtek to new technologies
and tools to stay ahead of the victims.
As I have said to earlier.
So when we are doing this kind of attack, if we use the windows so you can you can see that the Mac
address of the attacker now we place your Mac address, we lose your Mac address and B B in your device.
Get the messages of the attacker machine.
So therefore, it's a good way you can detect a, huh d hacker.
Is this Mac address or how we tried to trace him to find who it is but a clever hacker, what he can
do before launching this kind of attack.
He will change is Mac address.
So while we're changing, we are changing his Mac address.
Therefore, when you try to type in a common form, for example, AARP minus eight.
And then you will get the Mac address used by by the attacker.
But that Mac address isn't that he's always, you know, Mac address because he can change it.
There are many tools out there.
Encourage Nick so that you can add al-Attar in attacker major changes.
IPA is Mac address.
So one very well-known and very useful is Mac Chinja.
So it can use much ginger either to to modify his Mac address as random or as you know, as specifically
for this attack and then therefore when he closed his candy machine.
So he will get is always, you know, Mac just back.
But when attacking he can use a window Mac address.
Okay.
To avoid it.
Trust relationship.
Some systems rely on IP trust relationship that will automatically connect to older devices in order
to transmit and share information.
This is this is this is really one.
However, you should completely avoid relying on IP chips with a change in your business when your devices
use IP addresses only to verify an auto machined machine or user's identity.
It's easy for a hacker to infiltrate or to to get into the Mader and spoof your ah.
Your HP solution is to rely on private logins and password to identify user users.
Whatever system you choose to validate your users, you need to establish to put action policies in
your organization.
This simple technique can create an added layer of protection and keep track of who is trying to access
your system.
All right, guys.
So all this information we provide you and the file and the resource to make sure, please, you check
them out so that you can understand exactly how it works.
Some people might set up packets fill doing this is very good step as well to to put in place.
And some people can check at looking at your malware monitoring settings, how they get alerted when
some kind of strange traffic are moving along the networks and on spoofing attacks, identification
and prevention are key to preventing spoofing attack.
However, you can increase your chances of staying safe and protecting your data by running your own
spoofing attack, work with your security or freeze or ayari team members to Warner is spoofing attack.
To see if Dimitriades was using our oil enough to keep your system safe and your debt as well.
So as you to take Noufal, Nobilities documents your tests and methods to keep track of what's working
and what has failed when your own spoofing attacks.
Once a quarter or even once a month.
It depends on you.
It depends on you to stay a step ahead of hackers and the evolving strategies as you become more comfortable
and fluent in the process.
When workshops we impose on what to look for in attacks and try to ask for some advices and core cooperation
so that you work with some people and I.D. and so that you can empower your security system and your
company.
All right.
OK, so in this video, what we have seen, we have seen how to scan in it.
We have seen how to lease your network and how to use it, a cop to make a man in the middle attack.
And then we have seen, too, how you can try to monitor your system and how you can try to prevent
yourself from being attacked by this kind of a Arpey by rezoning attack or which which can be made by
a dose attack or sition hijacking or Millander media attack.
So, for example, here.
So when in the middle.
Attack.
All right, guys.
And this file is all we provided to you.
So we'll convert it, of course, into a pillow fight.
And and we will provide an end, despite if we have a Mac operating system missile so we can use this
disk file.
And if you don't have a Mac, so we will try to convert it into a PDA so that you can use it and try
to read all the good information that we have put there so that you might so that we help you understand
how spoofing attack work and how to win in the metro attack works, suffering that.
So we really think that this video was very informative for you all.
And then we are looking forward to seeing you in the next video.
And in this video, we talk about, OK.
We will go in to deeper.
Of how you can attack some some Web sites or we will we will perform a hacking phase so that a basic
hacking phase that we can know how you how you can try to hack some Web site or hack some pages into
Web site and how you can get some information and stuff like that.
Okay, guys, so we are looking forward to seeing you in the next video.
Thank you.
We can just stop it.
Again, just minimize it.