Welcome back, class.
We wanted to add one more bonus video just to show you another site being cloned.
Sometimes you'll have trouble with the first site you try and a Web sites are updating all the time.
In fact, some people will have trouble with Facebook from time to time.
So I'm going to show how to clone the Twitter log in page so that we've got a little bit of variety
here.
And so you can see another Web site that you might want to try.
But the important thing with set is to just keep trying.
If a Web site is made, it really difficult to clone.
You can try that critic troll harvester with a page that you create yourself or you can just find another
Web site that works a little better.
So I want to go out to Twitter dot com slash log in.
And remember, we need to find a page where we got the log in right here, built in.
I've got the dark settings set on my Firefox, so it looks a little bit different, but that's OK.
We want to get a full log in page so that we've got a path to something that has a username and password
on the same page.
So I'm actually going to copy that so that I can bring it over into my social engineers tool kit.
And I'll scroll down to 13.
Set.
We'll have dinner, my password.
Okay.
I.
And I'm going to agree to the terms, yes.
We'll only use this for good.
And I'll increase the font size just a little bit so you can see that better.
So we're going to do a social engineering attack, one Web site attack to a credential harvester because
we want to get usernames, passwords, three and then two for the site cloner.
And the IP address for clinics is prefilled in there.
It's turned out Odah nine, that's seven this time that we're running Kalli.
And now I'm going to enter the you are old clone now control shift v, my htp s Twitter dot com slash
log in page.
And where it looks like we're up and running.
So we'll come back over here and now we'll run local host.
And local hosts should have a log in page.
There we go.
And if I try.
Fred Flintstone
with the password of Wilma.
And press log in.
Well, Fred entered as information, it looks like, but we may have to try to log into Twitter again,
come back over here and we should see some information.
Ha!
Possible username.
Fred Flintstone.
Possible password field, Wilma.
Very cool.
All right.
Well, I hope you've enjoyed learning about social engineering.
Try a couple of different sites just so you can see and most importantly, educate your friends, educate
your family, and educate your coworkers about how important it is to look for the signs of phishing
emails, because if not, you may be entering your information into a Web server run by a black hat
hacker.
So I look forward to seeing you in the next lesson.