All right, so welcome back, everyone.
This is a speech and the session is about, again, the demo, the real time hack of LinkedIn accountants
or I would say LinkedIn account takeover or hijack using beef and be back earlier.
We have seen how we made it possible with beef and DPW, where I hope you're getting the purpose of
DPW will be vapid just to me, just to make sure we have an infected website where there is no control
over the data going outside of its perimeter of Facebook, in fact.
OK, let's let's get our let's get our Carly ready.
This is O'Kelley.
And as you can see, the article has been started.
So I, I, I hope you got the idea so far.
First of all, you need to go to the beef.
That's where you have your package.
And from there you can run the beef script so that your beef get the launch.
And once it is started, then you can go to the browser, you can go to the browser and that's where
you can type your you know, that's where you can log into your UI.
All right.
So as of now, there's no online browser.
Exactly.
And it is as it is.
And now we need some online browser at this moment will go to war with the machine.
This is our Victor machine.
And from there we launched the browser.
And in this case, because we need do we need to compromise the what we call.
We need to we need to we are making use of Beevor, which is the infected site in our case.
So let's login to the OS, BWV and this is of SPW, what you see on the bottom over here, OK, and
over there we have got multiple website, multiple wonderful links of the websites.
I remember this is this is all hosted.
This is all combined and hosted in OS BWV projects where you find all this packages available.
So let's login to be VAP and the default credential is B, but all right, let's login.
And now it's completely a simulation, not a kind of simulation where it is already infected so you
can select your desired testing.
So we would like to test affected exercise.
Right, so we can make use of reflected get reflected exercice crossette scripting and get response.
And that's where you can test yourself in fact any script.
So let's say I test a simple script.
C My idea is not to test something really simplistic or something which doesn't doesn't require it in
the real world, although we might be taking help of initially, we might be making use of some basic
tools some time just to make sure you understand how it really works.
And the basic what the rest everything.
It's all a continuous job of finding vulnerabilities so that you can move to move to and start compromising
the latest platform as well.
So let's see if we're testing on, i.e. at this moment, we can learn to test or learn to test the same
thing with Chrome and Microsoft each as well.
First of all, we need to see how exactly the method really works and then we can go at with the other
other market leaders as well.
Right.
And then you can type anything into it.
And let's see if.
Oh, wonderful.
So you see, we have just submitted some information to be VAP and it is giving the same script back
to us as a part of effective exercise.
This means it has a one ability and we are sure that this hack would be successful.
All right.
So let's get started.
We have our hooked.
Yes, OK, this is our juice.
This is what we have to submit it to the beat at the infected site.
Let's again create this script.
Sorry and
sorry.
This is my bad.
And we need to define the you are l.
And then the IP address of the beef, which is 10, then, sorry, go and three thousand.
Stasch.
That is right, and that's any random number doesn't matter just that we have to feed, so you have
to summon something.
OK, now we have we have the scripts reading the figures.
What is exactly going to happen at the moment?
I click on Go.
The JavaScript code will be submitted to Webapp.
And because it is a redirection, I mean, because that is a redirection to this you warrant.
So this request will be going to beef and that's why that's how the beef get directly beef.
Establish the connection with the victim machine directly.
OK, let's move on to let's see if we are getting the request.
Establish an online browser on beef system.
We'll probably have to wait all while wonderful, you could see it has been successful.
We could see the what was earlier offline browser.
Now that looks like online browser.
You see this now what we have done earlier, we can try the same thing.
In fact, we can do it with Langdon.
Of course, as a part of it, we can do it with LinkedIn because the session is about that.
But you can also drive at Facebook the way we have tried earlier, that this is what it is.
And
so this again, gives you the idea about the system is the same system.
So we have information about the system, Mozilla and whatnot.
Come on, let's go for social engineering.
And then I hope you remember the green is for exploitable and unpredictable.
What do you see in the oranges?
Exploitable, but maybe detected by the users.
Red is something which is not cannot be done for sure.
And if you find some green, this means it's not really recognized.
So let's go to petty theft.
And from there we are.
Let's first test with me Willingdon.
OK, but then you test what is the backing.
If you want to define some custom logo or something for any specific website, you can do that.
The purpose is you can have any one horrible site, some user go there, user get redirected to any
email or phishing email that you sent him across.
From there, it submits to JavaScript to this vulnerable site.
You get the response back as a JavaScript and from after noun words, the user is completely in control.
Now, whatever we are doing, it's all post exploitation activity.
So now you can completely control the user machine by sending any popup off, maybe LinkedIn or maybe
Facebook saying that, okay, listen, your Facebook account has been locked out or, you know, in
order to proceed further, let's log into your Google account or LinkedIn account and then user go ahead
and submit the information and submit the credential.
And we're supposed to get it on our beep system.
Let's try it out.
Wonderful.
You see, we have just executed this LinkedIn and user get a prompt for LinkedIn that has teamed up
for LinkedIn.
Right.
And let's say we do it for test and the regime and dot com and maybe password estis.
OK, and let's Sinon, nothing happened, but something happened here.
But see.
Lovely.
Can you see this, this Saiz answer is yes.
Aderet G.M. dot com.
And the password is this is really cool, right.
This is how the account can be taken into account.
Can be compromised for LinkedIn.
I mean, not just for LinkedIn.
In fact, this can be even done for Facebook as well.
You can even execute a game for the Facebook and you can see it's working very so best one maybe or
two at G.M. dot com password could be test one, two, three.
That login didn't work again.
But did it did we get the response.
Yes, that's right.
I hope you got the idea.
I hope this was useful to you as well.
We'll catch you in the next session.
Thank you.