There are several powerful tools for penetration into any Remote PC. The best solution for this is:
.
Do wait for my next post on this topic. In the mean while let me give
you an efficient alternative for such penetration with the extremities
of a Local
Area Network(LAN).
Generally for getting secret information such as passwords. we go by
Here,
we create a fake login page and redirect the password entered by the
user to a pre-defined database.But, as per recent advances, receptions
of complaints and public awareness; people have
grown consensus regarding fake login pages. It can be clearly known by
the address of the webpage which is not anyhow the same as
Lets learn a powerful penetration method :
Man In The Middle attack.
I will discuss all the types of penetrations using this method and also their prevention steps.
Theme :
A
basic network terminology HTTP(Hypertext Transfer Protocol) generally
sends all the necessary information through plain text. In this
scenario, if we make the victim use HTTP instead of HTTPS for getting
connected to sites like Gmail, Facebook, Paypal etc., it will be much
easier to successfully attack the victim computer by
MITM attack(
bucket-brigade attack),also called as
Janus attack. To make the penetration operation to perfection, we will use a tool called SSL strip.
Required Applications:
i. SSL Strip >>
LINK>>
ii. Ettercap >>
LINK>>
iii. Python programming language latest version >>
LINK>>
iv. The python “twisted-web” module >>
LINK>>
(3 and 4 are required for SSL strip)
Procedure:
1.
Open SSL strip application and fill in all the required information for desired fields such as
arpsoof, network ,ssl strip, change data .If you are not aware of these, simply click auto check . Do remember to switch from HTTPS to HTTP to get included in
Change data.
2. Then, in the listed ip addresses, check the ip address of the victim.
3.
After the completion of this step. open the Ettercap application and go
to sniff>unsniffed sniffing and select your network interface.
4. Then select
hosts-scan hosts from the menu .Once scanning is completed, it is all set to start the hacking.
Open host list from hosts tab . Then just select the IP address of the router as target 1 and the victims IP as target 2.
5. Then select the MITM -arp positioning without selecting any additional options.
6. Finally, go to start>start sniffing .Now when the victim logs into gmail or facebook or paypal etc., he will be using
HTTP not
HTTPS . Hence
it is now easier for us to get the User id ,passwords of the victim
what he is using to log into the desired accounts. Just check the
processing window out there and check log for the below combination.
example:
Data(wwwfacebook.com):keyid=1021458674&bankCode=U&FirstnameLogin=No&userName=hackdigital&password=hackdigital
Solution:
To keep yourself away from such penetration attacks,do follow secure procedures.
* Always use HTTPS instead of HTTP.
* Use two step verification login procedure for Gmail.
* Always check the addressbar before going into the webpage.
*
Always check the
SSL certificate before doing an online transaction.
* Keep your antivirus updated. I recommend the use of
ESET Smart security for a better digital coverage.
* For social networking sites do check my post on how to be safe in social networking sites.
Do post your comments if you like this article.
![Akash 1 Aakash Tablet Review Worlds Cheapest Tablet at US$ 28.99 from India [REVIEW]](http://hackdigital.com/wp-content/uploads/2011/10/Akash-1.jpg "Aakash Tablet Review Worlds Cheapest Tablet at US$ 28.99 from India [REVIEW]")
![india akash tablet Aakash Tablet Review Worlds Cheapest Tablet at US$ 28.99 from India [REVIEW]](http://hackdigital.com/wp-content/uploads/2011/10/india-akash-tablet.jpg "Aakash Tablet Review Worlds Cheapest Tablet at US$ 28.99 from India [REVIEW]")
