Oh, yes, there's plenty more to do.
There are several tools to perform an art spoof attack, such as art spoof, the command line tool,
which is embedded in COLLY, but we're going to use AACAP for the demonstration of the art spoof attack.
AACAP is a free and open source network security tool for men in the middle attacks on LAN.
It works by putting the network interface into promiscuous mode and by art poisoning the target machines,
thereby it can act as a man in the middle and unleash various attacks on the victims.
AACAP has both a command line interface version and a graphical user interface version, let's see them
both in action.
First, let me show you the command line version of AACAP.
So this is my network created in three.
I have a collie and a WASPy way animate exploitable VM and the network.
To use if config inside the VMS to check the IP addresses and the other interface configurations as
well.
So paying each other to be sure that they can communicate.
OK.
Now I go to Carly overdetermined screen and do the same here, check the interface configuration and
ping other VMS.
Yep, everything's OK.
So let's look at the art table of medicine, voidable type are RN and press enter.
So currently, there are two records in the ARP table of boy, one for Collee and one for Oos Bway.
Now, let me show you something, if you want to perform an art spoof attack, you should enable IP
forwarding in your attacker system so that the packets will not end on your attacker system and be forwarded
to the destination system.
Otherwise, you'll block the traffic between the victim and the spoofed system.
Check that out.
So the IP address is managed by a variable IP forward like in Collie.
And to look at the final content type.
Cat proxy exists Agnete ipv for IPE Forward and press enter.
Its value is zero, so to enable it, it has to be one, so I'll change it.
You can open the file with a text editor and change the value, but here I'll just simply use the Echo
command for this purpose.
Echo one.
Greater than sign the entire file name.
So check the file again.
And yes, its value is now one.
Now, please note that AACAP enables IP forwarding automatically, even though you don't enable it manually.
All right.
I want you to know what's happening behind the scenes, so to speak.
All right, so now is the time of the attack before creating the comen, let's see the manual of etiquette.
So type man etiquette and press enter.
So here's the short definition and the long description targets.
M four men in the middle Midem attack.
So these are the Midem attack types, AAB, is it the first line and the others, ICMP, DHP, et cetera.
And here are the user interface options t for the text only interface.
Anyway, let's just create the command.
So first, the command itself, aacap I the interface either zero T for the text only interface type.
M to make it admit Midem attack and select a Midem attack type AAFP column remote.
So the first IP specifies the IP address, which will be spoofed and the second IP address is the victim
system, so that means there will be a row in the meta spoils ARP table with a Carlee's Mac address
and a WASP Busways IP address.
And that means when metastable voidable wants to send a packet to always be the way it will be sent
to Colly instead.
Right.
And with the help of IP forwarding, the packet will arrive at a speedway finally.
Now, please don't forget to use these slashes at the beginning and end of each I.P. address, the command
is ready to run.
So let's see what it does.
Hit enter.
And here's a summary of the attack, the victims.
Interface, type, etc. Now go to bed exploitable AAFP nt to see the table again.
And as you can see here, the first record is for Caylee, so please look at the Mac address and the
second record is for Oos BWI.
But with the attackers, Mac address, any packet sent from Métis voidable to Oah Speedway will visit
Colleano.
So let's create a telnet connection to Port 80 of a WASP VWA.
Type Telnet, a wasp bue IP and the Port 80 now hit enter pipe get HTTP 1.0 and press enter twice.
And here is the HTTP response, the main page of Oos BBWAA.
Now, let's go back to Cali and see what happens.
So these are all the TCP packets sent for Métis voidable to always be that way at Packet Fyn packet
and scroll up a bit and here's a telnet connection.
Results HTP response.
Keep going up.
We can find some other critical data here to.
And here are some credentials, for example.
In the terminal screen where AACAP is running, you can use control, see to end the attack.
So there it is.
It's not.
Now go back to med exploitable and look at the AAP table again.
Now, the IP address of Oos BWA is matched with a correct Mac address.
Now, you might remember what I told you before that, well, I hope you remember everything that I
told you before, but in particular, AACAP has a graphical user interface as well.
So let's have a look at AACAP Schooley right now.
Again, we're in Colly Click Show Applications, Menu Item and type AACAP, and here you go, you'll
find the AACAP GooYa.
So these are both AACAP gooey apps, you can just simply click one of them.
I want to show you, though, another way to start the app from the upper left corner applications go
to sniffing, spoofing tools and select AACAP Gooey.
OK, so here we are at the main panel of the outer cap, Gooey.
We'd better check the network, so I'll open up a terminal screen and ping the other teams at a supportable
and oos BWI.
Yeah, everything looks OK, so go to the sniff menu and enter AACAP and select Unified Sniffing.
Asking for input interface e0 is good.
Like, OK, if you look at the etiquette menu, it's totally different now.
To go to host and select Skåne for hosts, it's a kind of a ping scan to find out the devices of the
network found five devices and added them to the host's list.
To go back to host again and now select hosts lists and here's a list, very nice works well.
One nine two one six eight one zero one one is a WASP Vidalia.
So this is a system that will spoof so selected and quick add to target to.
So one nine two one six eight one zero eight one two is met us voidable, that's our victim.
So we'll change its heart to table, select it and click add to target one.
I think now we're ready to attack.
What do you think?
All right, so let's go to Midem and quick AAFP poisoning.
OK, check this sniff remote connections option and click, OK?
And the final step, go to start and select, start sniffing.
So the attack has begun.
Let's go to Matt Exploitable and see the attack result to see the ARP table type RPN and press enter.
The first row is for Oos BWP, but the Mac address is Collie's Mac to show it now while paying Colly
to create the AAFP record.
Run the command again, and now I have another word for Collee and both Collee and Oos BWA of the same
Mac address.
OK, you know, the rest the package will be sent to Cali instead of Oos Bue, so if you like, you
can open Wireshark and collect the fruits of your labor.
Enjoy it.