Hello, everyone, welcome to our new video with our man in the middle attacks.
Today, we're going to see how to perform various men in the middle attacks using better care.
Better care can be installed easily using APT and still better cap installed.
Better cap on Kelly.
You can also installed on Mako using Brout install.
Better cap.
I have sit in seven box here on the right.
Let's check its I.P. address.
I'm just checking the IP address to verify with you that the same IP address that we will get later
from better cap results.
All right, now let's find some addresses in our network by using the dash dash, no spoofing option.
I'm sorry about that.
I just turned on the VPN, so it should be working.
OK, so we have a lot of devices here.
One of them is the zero that forty seven of the Windows seven here.
You can also see the Bizimana.
Right.
We're using better carbon, we haven't specified interface by default, they will use the default interface
you have, but if we can, we can also choose interface by using the Dashi Capital II option like this.
If we run better cap without any arguments, he will attempt to spoof all hosts in the network.
But in this lesson, we are not going to do this.
So in order to specify a target, we will use a dash capital T option and then followed by the IP address
we want to sniff or spoof.
So one ninety two one six eight zero four seven.
We can also use the Dashty for the gateway, but we don't have to do this because by default, better
capital is the default gateway.
Now let's try and sniff and TPS websites using SSL strip.
The way your system works is in short, it replaces old age tips your URLs with HTP ones without SSL,
but it will do that only with the client side and then it will communicate with the server using it
to DPS for the same link.
It has changed.
So basically, basically, it will try to downgrade it to tips to GTP and communicate, communicate
with the server during that.
This technique doesn't work on all websites because of something called HTP, strict transport security,
or in short, it's H.
S t.
S s s t.
S as a security mechanism in modern browsers that doesn't allow for tips to downgrade HTP.
I'm sorry I downgraded to HTP.
It forces them to use tips for better security.
So if you are requesting a website on HTP, it will force you to use https.
So Web browsers also has something called preload lists.
The Prioleau lists contain sites that must be accessed with tips.
So if you're lucky and attacking a website not in the list, then you'll be able to intercept https
connection.
Websites like Google and Facebook are on the list already, so we're not they're not going to work so
better can bypass it.
It just.
Yes, by changing the euro, you're visiting and adding something else to it.
So, for instance, if we are visiting, visiting a website called W W W Dot, Bank of America dot com,
it will intercept your doonas request and add maybe something to it, like w w w w maybe one more to
the URL and it will get the DNS um um name and the IP address and it will pass it to your Web browser.
This will make the Web browser of the victim thinks that this is a new domain not listed in the Prioleau
list and hasn't been visited before.
Therefore it will accept the HTP connection without implementing SSL to it.
Let's see how we do this using Betacam.
I'm using here to Dashty for our target and the best as proxy for our SSL to work.
You can also specify a pause for the proxy.
So if we go here and check to help.
And go to our proxy.
Here, proxy and proxy port, you can also specify that, but I just leave it the default one and we
can also specify the DP, which is parsers we can use the post or like F.T. DHP, anything else we will.
I'm going to just use the post here.
All right, let's start.
Now, Windows seven machine lets open Google, maybe visit our website like Bank of America dot com.
All right, we look here at the left side, let's see how words.
So here it's using a SSL strip and it's changing all the euro addresses inside the Bank of America itself
because Bank of America, of course, it has a lot of euro addresses inside the page, this Web page.
Now, let's try using your username and password.
I'm just going to test the user name here.
Just post one, two, three.
Well, we're getting something here.
See, we got the test, of course, if you look here decide it says not secure, but a lot of users
don't realize that they don't even notice it.
So here we got the passcode.
We got the on line, the password and the user.
Right.
So we were able actually to do so straight here because we were using HTP.
The website is not digital anymore.
Right.
All right.
That was a quick demo on how to use SSL strip using better cap.
Thanks for watching and see you in the next video.