Let's talk about IP ITV 6 attacks and mainly we're going to be talking about our DNS takeover attacks
via IP 6 and as of right now this is the go to attack for me.
It used to be responder you know grab the hashes try to crack them and then it was SMB relay and if
you can't crack the hashes we'll try to relay them.
Well this is just another form of relaying but it's so much more reliable because it utilizes IP vs
6.
And I'm going to just use my pen for this one we're just going to kind of talk through this and you're
gonna see how terrible I draw.
By the way.
And then we're gonna go right into it and you're gonna see how cool this really is.
I can't even explain how awesome it is.
So I Peavey 6 attack.
If you think about a machine running on a Windows network we typically run an IP the four right.
And we have the box and it's typically running IP before in the network.
Chances are the networks not even utilizing IP 6.
If you go look at your computer now and you go into your network adapter properties chances are ITV
6 is turned on but you're utilizing IP for if you do an IP config just for a Windows example right.
So if or utilizing V4 but v 6 is turn on who's doing DNS for v 6.
And the answer usually is nobody nobody's doing that.
So what we can do is we can say hey I'm going to setup a attacker machine we'll give them a smiley face
and kind of a smiley face and we'll we'll take him and we'll listen for all these the six messages that
come through and we'll say Hey I am your DNS OK I'm going to spoof the DNS server.
So send all your IP six traffic to me and then I'll go ahead and just pass that along for you.
The issue here is that when this happens we can get authentication to the Domain Controller.
So say this is the DC we can get authentication to the domain controller the et al that or we can do
so via SMB.
So what we can do is we could take for example and you're going to see in the example that we reboot
a machine that reboot just triggers an event that event comes through to us we can use that machine
to log into the domain controller and it doesn't have to be an admin or anything and we can get information
a lot of information out of just that we can potentially use that machine to create another machine
as you're going to see from a blog example and we can wait for somebody to maybe log into the network
or use their credentials somewhere and guess what that comes to us in the form of a. m. just like a
responder just like SMB relay and we relay this we do what's called elder app relaying we El that relay
over to the Domain Controller with this until I'm credentials we log in if it's a domain administrator
to the domain controller.
And guess what.
We create an account.
It creates an account for us.
This tool that we're gonna use is called Man in the middle six and my team six.
And what we're going to do is we're going to use this tool.
It's going to do all this for us.
We're gonna combine that with entail and relay X and it's going to relay into all that from our A.L.
A.T.M. credentials and then this tool is going to create along with until I'm really X is going to create
a new account for us and it's gonna do so many awesome things.
So I'm really excited to show it to you.
We just have a couple of steps we have to do we have to download.
MAN The middle six in the next video we have the setup.
L That s really quick which is just a certificate and then we're going to be rolling and this is one
of the most fun attacks still very undetected very hard to detect and still very very prominent in network.
So let's go ahead and move on to the next video.
Get me in the middle six installed and then let's go ahead and see a live demonstration of what this
attack looks like.