OK so now that we have the web interface installed and running let's see how we can use it to interact
with better cap and launch all of the attacks that I showed you before.
Without having to type any commands and as you can see we have a very simple and easy to use interface.
There is no more commands that we have to run even though we can run commands here through the command
line.
Right here we have the event log.
So this is similar to what you see in here and the terminal but it's in a much nicer interface.
You can use the search bar here to filter.
If you're looking for a specific log or for a specific event and you can actually click any event type
too muted so you won't see any of that event on screen all of this is happening in here and the events
menu the next useful page would be the land page right here which will show you all the devices connected
to the network.
So this is similar to when we used to do a net show as you can see right now we only have the Raptor
which is a 10 0 to 1 and my current computer which is 10 0 to 15 This is Carly.
Now as you know before we had to start the net dot recon and net dot probe to discover all of the devices
on the same network.
So in here instead of writing the commands all you have to do is click on display button to start the
net dot probe and click on this play button to start the next three con you'll get nice notifications
in here.
And as you can see we managed to discover all of the connected devices.
You can also see in here we have a nice tag to tell us that this is the gateway and a nice tag telling
us that this is our computer and the devices that we discovered are these two devices and you can see
this is my M.S. EDGE device.
The windows machine that we have always been targeting again because this is a very simple web interface.
You won't have to type anything you can click on this little arrow right here beside the machine beside
the IP.
You can either scan this machine for ports or add it to your spoofing targets so you won't have to set
a piece poof the target's to this IP.
All you have to do is literally click here and it's automatically added to the AARP spoof.
Not only that but we'll see a nice little window in here to configure our AARP spoof.
And remember we used to set this option to true the full duplex.
So all I have to do now is just click here to check it and to start this spoof for all I have to do
is click on Start spoofing and done.
Now we should be spoofing the target as you can see we also see a nice icon in here beside this IP to
tell us that at the moment we are spoofing this IP telling it that we are the gateway.
So now if I go to my target and just do a sharpie A you can see that the rafters MAC address has changed
to the MAC address of the Kelly machine which is this one.
So that means that we are properly spoofing this device telling it that we are there outer and we managed
to become the man in the middle now of actually showed you how to do all of this before in details.
So if you don't remember any of this or if any of this feels strange then please go back and revise
the lectures where I cover these things.
Now I also showed you how to bypass hasty G.P.S. and partially bypass h as t as using a couplet.
Again we have a nice menu here for couplets and as you can see we have all of the couplets currently
available with better cap and all you have to do is just click on the couplet that you want to run.
And in my case it's the H S T S hijack couplet.
Also if you remember when we were modifying this couplet we used to have to open the location where
the couplets are installed and then open the couplet in a text editor and then modify its options.
Whereas in here you can literally modify any options you want with this within this menu click on the
this icon right here to save and then click on play to on this couplet.
And as you can see you get nice notifications telling you that everything got executed as expected.
And right now we can go ahead and test this.
So if I go here and just clear the browsing data as usual and then if I just go to a normal hasty TTP
page such as Stack Overflow dot com you'll see that this will load over hash TTP so we can log in and
we should be able to get the user name and password as I showed you before and we can test the partial
HST yes bypass.
So if I go to Google dot I E and search for Facebook.
Click on the first result
and perfect as you can see it's loading over a normal hash TTP here again.
So if I log in the information will be captured by My sniffer.
So as you can see it is very very easy to edit couplets and even run them through this web interface
you can also run all of the other plugins through the advanced menu in here.
So for example if you wanted to start the sniffer all you have to do is just scroll down here looking
for the sniffer and we have it right here that dog sniff if I click on that as you can see on top it's
telling us it's not running.
And right here instead of running the commands all you have to do is just click on the commands that
you want to run not only that but if you wanted to modify any of the options.
Again all you have to do is just type whatever you want to modify in here click on this even here and
then run the command that you want to run.
So if I wanted to start the sniffer now all I have to do is just click on net dot sniff on and this
will start the sniffer for me.
Now the sniffer combined with the nice events that we can get in here makes it easier to filter through
the data that we capture.
But it's still not the best way to filter through the captured data I will cover how to properly sniff
data and filter it using wire shark which is the best tool for sniffing and filtering data.
But again this web interface right here provides a nicer way of interacting and using better cup.
Now I want to show you how to use the Wi-Fi the BLT the idea and the poison menus because we actually
did not use any of these modules previously.
So I just wanted to focus on showing you how to do everything we have done so far using this interface.
Like I said it it is easier to use.
I agree.
But once you get used to the terminal interface it will be just as easy as this one.
To me it's more organized.
It can be used to achieve my goals much quicker.
It uses less resources and it's faster.
That's why I prefer using it over the web interface.
And if it wasn't for showing you how to use the web interface I wouldn't even install it.
But at the end of the day I want to show you both options and obviously you're free to use whatever
is easier for you.