Hello everybody and welcome back.
And basically what we will do right now is I will show you how you will install a tool that we will
be using in order to perform our man in the middle attack.
Now that tool is called basically man in the middle framework and it comes.
Well it doesn't come pre installed on clinics so you will have to insulate from the hip hop repository.
And after that we just need to install some of the requirements that it has.
And basically after that you will be good to go and you will be able to run the program.
Now I already have it installed right here as we can see it is right here man in the middle framework.
So but I will still show you how you can download it yourself.
So go to the Firefox open up in Firefox and basically what you want to search is just me and my TMF
And then uh GitHub so you open up the first link and we will download it from there.
Let me just open this up.
And let's search.
Am I TMF GitHub.
So we click their presenter and will open up the first thing that comes up which is this one so click
on it and you will see that this this is the tool that we will use.
Now if you scroll down here you will see its files.
And here you will see some of the explanations.
So it says right here this project is no longer being updated.
So uh you might need to add some configurations yourself if it doesn't work.
Uh so that we know of but we will install the comments ourselves.
So here you have some of the features.
Yeah.
Here you have the description and my TMF aims to provide a one stop shop for men in the middle and network
text while updating and improving existing attacks and techniques.
So active packet filtering modification you can also use uh Skippy to do that as we can see right here.
This is some ICMP packet just this is just an example.
Here we have some of the examples of the usage.
We will basically cover all of these or most of these in the next lectures for now and we just want
to install this program.
Let me see if there is something down here.
Currently available plugins.
You can see what it currently has.
So we have ACA drive by ASM SMB traps screenshots.
We will also cover that respond to less cell strip.
That was what I was talking about.
If the uh you can use the ISO strip to bypass some of the EPA press websites in order to decrypt their
data here we have proof.
So we would be using the ARB spoofing.
Also some of the DNS spoofing uh you have some of the other options such as inject file prone browser
browser profiler and key loggers and all of the other stuff that we will also cover.
So right now what we want to do is just download this file so let us copy the link
and basically open up our terminal.
Let me just type in my root password so change to the desktop and we type your get clone and then paste
the link and add dot get so baseball download the file for us in a while for you since for me it already
exists.
As I said I already have it downloaded right here.
And once you do that once it downloads and it copies the the file into the M.I.T. Mia the am I.
TMF directory you want to change the path to that directory and you will have this file right here called
requirements start to 60.
Now in order in order to install those requirements you just want to type your pip install minus our
requirements not to exceed.
And it will install install all of the requirements it needs in order to run this program.
Now that could take a few minutes to finish depending on how many requirements you already have satisfied.
But once it finish that you want.
Once it finishes that you basically just want to top type here and my TMF not by.
And it will run the program for you.
Now I believe I need to specify or wait let me just check something.
OK.
So it gives us the output of that program as you can see there are a bunch of options right here.
Here we got some pretty bad right here.
You can type minus minus help which basically gives you the same output as this comment which without
a minus minus Well we have some of the other options such as interface that we will have to specify
at all of the times or to read the config file filter spool far biasing MPD or CPE so these are just
bunch of the options for spoofing.
We are back at the ICMP packets the DCP packet DNS packets and so on shell shock payload we did cover
what shell shock is.
You will also need to specify the gateway.
So the program knows who is the router.
Here we have the load plug in so we can inject the javascript code.
So that could be interesting.
Here we have some of the.
My type is black eyed peas by domains black domains inject content only for these domains.
So this is basically just white listing and blacklisting.
We have the je ne our script key logger as we can see right here we will also try to use that and we
have a bunch of these other options that we can use as well.
Now we will cover all of those in the next videos from now on I just want to show you how you can install
this tool and you can see what kind of options it provides.
So the other tool that we will also cover after this.
But not so deep but not in details would be the better cap.
It comes pre installed in clinics and also I have it installed right here.
So you will be able to use it without downloading it will cover some of the basics for it as well.
It is also used for the man in the middle attacks and you after this section you will have a really
good understanding of how men in the middle attacks work and you will also know how to perform them
but you will also know that it is something that can be easily detected.
So our reporting is especially easily detected and I will also show you how you can do that.
It can also be done with a simple python program which we will make later on but for now on that would
be it.
So in the next lectures we will continue using these two tools and I hope I see you there by.