Kali Linux : MITM Attack

Perform A Man In The Middle Attack With Kali Linux & Ettercap

Written by Lewis Cyb3R Shzz0R

It’s one of the simplest but also most essential steps to “Conquering” a network. Once a hacker has performed a “Man In The Middle” attack (MITM) on a local network, he is able to perform a number of other “Side-kick” attacks. This includes, cutting a victim’s internet connection; intercepting Emails, logins, and chat messages; and many others.
And only one tools is needed for this attack:

• An install or Live boot of Kali Linux, a well-known OS containing a collection of hundreds of penetration testing tools.

If you have that, then proceed to the tutorial below, and we’ll demonstrate how to perform this powerful attack.
Important Notice: This tutorial is intended to be used for penetration testing, i.e. the act of hacking to become more secure. It is not at all meant for malicious purposes. Performing any type of fraudulent activity on someone else’s network without permission is considered a crime in most countries. Lewis’s Computer Howto’s is using their own test network in this demonstration.


Step One:
Start Kali Linux and login to the root user.
Step Two:
Open a Terminal and type: leafpad /etc/ettercap/etter.conf

Step Three:
Look through the text file that just opened. On one of the first lines, under the [privs] section, look for the words highlighted below:


You need to change these lines to this:



By removing the number 65534 and replacing it with 0 (zero). You can leave the “# nobody is default” line.Step Four:
This next one will be tricky to locate, so we’re going to use the “Find” option. Click onSearch in the toolbar at the top of leafpad and click Find.
Type the word iptables in the box that appears and click the Find button or press Enter.

It should skip to a line that looks like this:

We need to “uncomment” the two bottom lines. To do this, remove the two “#” symbols before each “redir_command,” so that the two lines look like this:

Now close leafpad and click Yes when it asks you to save changes.
Step Five:
Now start Ettercap-gtk, open a Terminal and type ettercap –G

Wait until Ettercap opens. When it does, click Sniff in the toolbar and select Unified Sniffing… from the menu.

Step Six:
Select the interface that’s connected to the network.

If your using a wired (ethernet) connection, then the interface will probably be eth0, but if you’re using wireless, (WLAN), then it will be a different one. To find which one of your interfaces is connected, run ifconfig.
Step Seven:
Now Ettercap should load into attack mode. Click on Hosts and select Scan for hostsfrom the menu.

Step Eight:
Ettercap will briefly scan for hosts on the network. After a moment, you should see the words “hosts added to the host list…” in the command box. This is the green light.
Click on Hosts again, and this time select Hosts list from the menu.

Step Nine:
Click the IP address of the router and click the Add to Target 1 button.

Then select the IP of your test victim’s machine and click Add to Target 2.

Step 10:
Now click Mitm on the toolbar and select Arp poisoning…

When the question box shows up, check the box next to Sniff remote connections and hitOK.

Step 11:
Ettercap will now Arp poison the victim and router. Now if you want to see any of the victim’s personal info, you’ll need to click Start on the toolbar and select Start sniffing.

Ettercap will notify you that unified sniffing was started.
You’ve successfully executed an MITM attack!
You can now use tools such as URLsnarf and SSLstrip to sniff out information about your victim’s internet traffic. Tutorials on how to use these tools will be coming soon.
To stop the MITM attack, click on MITM and select Stop mitm attack(s) from the menu.

Ettercap will then send the ARP correction packet, and the network will return to normal. You can then close Ettercap.

Ways to protect yourself against one of these attacks.
There are a couple of methods:

• ARP detection software

This method is pretty useless. There are very few ARP detection programs out there, and the few that do exist are either free junk or over priced. In addition, to use these programs on a windows machine requires installing special drivers for your wireless cards.

• Static ARP entries

This method works the best for the standard individual. You just type in a simple command and your computer becomes “Unarpable.” This is how it works:
When an attacker performs an ARP MITM attack, his computer sends a ARP packet to the victim’s machine telling it that his mac address is the router’s. The victim’s machine is fooled and starts sending its data to the attacker.
When you enter a static ARP entry, you’re telling your computer that the router’s mac address is permanent and will not be changed. Therefore, your computer ignores any phony ARP packets sent by the attacker.
We will be making a tutorial on how to do this soon. In the meantime, you can use Google to find answers.

BackBox

BackBox is a Linux distribution based on Ubuntu Desktop, and designed for performing penetration testing, incident response, computer forensics, and intelligence gathering. It uses the Xfce desktop environment, and is developed by Raffaele Forte and a small but dedicated team.

This article, provides a brief overview or review of the latest edition, BackBox Linux 3, which was released on October 24 (2012).

Because it is based on Ubuntu, its installation program is Ubiquity, Ubuntu’s graphical installer. But the version of Ubiquity in BackBox 3 is the pre-Ubuntu 12.10 version, so full disk encryption and automatic LVM configuration are not supported.

Though the installer recommends a minimum of 4.2 GB of disk space for installation, a fresh installation of BackBox 3 takes up exactly 4.2 GB of disk space, so be sure to allocate a lot more than 4.2 GB to the root partition when installing it.

At the login screen, you are given the option of logging into a BackBox Session (the default) or an Xfce Session. What is the difference?

Except for the organization of applications in the menu, there is very little significant difference between a BackBox Session and an Xfce Session, at least as far as I could tell. When logged into the BackBox Session, all the security-specific applications are logically arranged under the Auditing menu category. In an Xfce Session, however, those same applications are distributed across several menu categories.

This screen shot shows what the BackBox Session desktop looks like. Notice the clean categorization of applications under the Auditing menu category.

Contrast that with this, which is a screen shot of the Xfce Session desktop. Most of the applications are under the Othermenu category, while a few are scattered across two or three other menu categories.

Aside from the security-specific applications, a default installation of BackBox 3 contains most applications for normal desktop use, aside from the absence of a complete Office suite. A default Xfce Session desktop contains more of those normal desktop applications than the BackBox Session. So this is one niche distribution that you can still use for normal desktop computing.

For managing applications, there is Ubuntu Software Center and Synaptic Package Manager. The rest of this article offers screen shots that show the security-specific applications that come with BackBox 3.

Information Gathering: Network analysis applications.

Information Gathering: Web application analysis software.

Vulnerability Assessment: Network assessment applications.

Vulnerability Assessment: Web application assessment software.

Exploitation: Network exploitation applications.

Exploitation: Web application exploitation software.

SEANux

If you haven’t been following the antics of the SEA then they’re the group of hackers who have made the headlines many times in the last year or so for some fairly basic phishing attacks against media organisations and others who have earned their wrath.

The hackers, who claim to be supporters of the Assad regime in Syria, made a name for themselves by managing to snaffle ownership of the social media accounts of various media outlets including The Guardian, ITV, The Telegraph, theWashington Post, Viber, Skype, PayPal, Thomson Reuters, and most recently Forbes, amongst many others.

Which raises the obvious question. If the SEA can be taken seriously with their tweet (and that is a fair question, as it’s quite possible that they are pulling people’s legs), then would you *ever* trust an operating system released by them?

After all, they’ve proven themselves to be untrustworthy and downright criminal with their past antics – so it wouldn’t be a momentous surprise if any software that they did release came complete with a few backdoors, or – failing that – some privacy concerning “bugs”.

For now, consider me skeptical of SEANux. After all, back in early 2012 the so-called AnonymousOS was released, a purported new operating system from the Anonymous collective – only to reportedly be found ridden with trojan horses.

And while we’re on the subject of who should we trust, let’s not forget this. Back in January visitors to the Syrian Electronic Army’s own website saw some unusual messages, after Turkish hackers used an SEA-like trick to deface it with their own messages.

Kali Linux : Wi-Fi Hacking

Wifi Hacking - WEP - Kali Linux Aircrack-ng suite

Alright, this post is written assuming you have Kali Linux up and running on your computer. If not, here is a post on hacking with kali linux. It will tell you about what Kali Linux is, and how to use it. It will guide you through installation process.
So if you are still following, then just follow these simple steps-

Firstly, create a wireless network to crack. Don't use this method on others. It is illegal. Then proceed with the steps below.

1. Find out the name of your wireless adapter.

Alright, now, your computer has many network adapters, so to scan one, you need to know its name. So there are basically the following things that you need to know-

• lo - loopback. Not important currently.
• eth - ethernet
• wlan - This is what we want. Note the suffix associated.

Now, to see all the adapters, type ifconfig on a terminal. See the result. Note down the wlan(0/1/2) adapter.

2. Enable Monitor mode

Now, we use a tool called airmon-ng to  create a virtual interface called mon. Just type 

airmong-ng start wlan0

3. Start capturing packets

Now, we'll use airodump-ng to capture the packets in the air. This tool gathers data from the wireless packets in the air. You'll see the name of the wifi you want to hack.

airodump-ng mon0

4. Store the captured packets in a file 

This can be achieved by giving some more parameters with the airodump command

airodump-ng mon0 --write name_of_file

Now the captured packets will be stored in name_of_file.cap
You have to wait till you have enough data (10000 minimum)

5. Crack the wifi

If all goes well ,then you'll be sitting in front of your pc, grinning, finally you've got 10000 packets (don't stop the packet capture yet). Now, you can use aircrack-ng to crack the password. (in a new terminal)

aircrack-ng name_of_file-01.cap

The program will ask which wifi to crack, if there are multiple available. Choose the wifi. It'll do its job. If the password is weak enough, then you'll get it in front of you. If not, the program will tell you to get more packets. The program will retry again when there are 15000 packets, and so on.

Note : This will not work with WPA-2.

Exploitation

Exploitation is the use of someone or something in an unjust or cruel manner, or generally as a means to one's ends.

Most often, the word exploitation is used to refer to economic exploitation; that is, the act of using another person as a means to one's profit, particularly using their labor without offering or providing them fair compensation. There are two major perspectives on economic exploitation:

• Organizational or "micro-level" exploitation: most theories of exploitation center on the market power of economic organizations within a market setting. Some neoclassical theory points to exploitation not based on market power.
• Structural or "macro-level" exploitation: focuses on exploitation by large sections of society even (or especially) in the context of free markets. Marxist theory points to the entire capitalist class as an exploitative entity, and to capitalism as a system based on exploitation.

Kali Linux

Kali Linux ( most popular "hackers" OS )

Website : www.kali.org

www.facebook.com/Cyb3RShzz0R

Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security Ltd. It was developed by Mati Aharoni and Devon Kearns of Offensive Security through the rewrite of BackTrack, their previous forensics Linux distribution.

Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), Aircrack-ng (a software suite for penetration-testing wireless LANs), Burp suite and OWASP ZAP (both web application security scanners). Kali Linux can run natively when installed on a computer's hard disk, can be booted from a live CD or live USB, or it can run within a virtual machine. It is a supported platform of the Metasploit Project's Metasploit Framework, a tool for developing and executing security exploits.

Kali Linux is distributed in 32- and 64-bit images for use on hosts based on the x86 instruction set, and as an image for the ARM architecture for use on the Raspberry Pi computer and on Samsung's ARM Chromebook

Welcome To My Blog.

Cyb3R Shzz0R - -This Blog is made by Croatian Grey Hat Hacker "Cyb3r Shzz0R".

-Hacking (computer security )

Like : www.facebook.com/Cyb3RShzz0R

Subscribe : www.youtube.com/Cyb3RShzz0R

Pastebin : www.pastebin.com/u/shzzoRpentesting

In the computer security context, a hacker is someone who seeks and exploits weaknesses in a computer system or computer network. Hackers may be motivated by a multitude of reasons, such as profit, protest, challenge or enjoyment. The subculture that has evolved around hackers is often referred to as the computer underground and is now a known community. While other uses of the word hacker exist that are not related to computer security, such as referring to someone with an advanced understanding of computers and computer networks, they are rarely used in mainstream context. They are subject to the longstanding hacker definition controversyabout the term's true meaning. In this controversy, the term hacker is reclaimed by computer programmers who argue that someone who breaks into computers, whether computer criminal (Black hats) or computer security expert (white hats), is more appropriately called a cracker instead.Some white hat hackers claim that they also deserve the title hacker, and that only black hats should be called "crackers".