+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Remote MITM attack?? (/showthread.php?tid=5963612)
Remote MITM attack?? - trish - Apr 24, 2019
ok after cracking a network i was wondering whether i could leave a "virtual device" on the network performing a MITM even while i'm absent? Is there already a technique for this?
RE: Remote MITM attack?? - Coooool - Apr 24, 2019
Just a fair warning, I am really not that experienced when it comes to network sniffing but you could plant a physical device like a raspberry pi zero looping a sniffing script. With the right tools you could even make it so you have FTP access to it so you can access the logs remotely.
RE: Remote MITM attack?? - ombudsman - Apr 24, 2019
(Apr 24, 2019 12:02 PM)Coooool Wrote: Just a fair warning, I am really not that experienced when it comes to network sniffing but you could plant a physical device like a raspberry pi zero looping a sniffing script. With the right tools you could even make it so you have FTP access to it so you can access the logs remotely.
What he said, but also you can't have a mitm account without having the ability to sniff traffic, which is mostly done from close proximity but, you could also hack target 1 which is in proximity of the target 2 and then do a MITM from that target, you can't run a MITM attack 100kms away tho.
RE: Remote MITM attack?? - Sitrep - Apr 25, 2019
Just a note first, this is highly illegal and I do not want you to do it...
But, if you have access to the network already, you could try to plant a RAT or some FUD backdoor on a target machine if you have access to it.
Otherwise try to use SSLsplit on the network to watch all traffic going in and out from that network.
Those are some pretty old and outdated techniques that I listed but it's worth a shot I guess.
RE: Remote MITM attack?? - CyberStrike - Apr 25, 2019
A virtual device ? Hmm initially I'd think that rooting the router and performing a BGP hijacking attack would be easier than getting a machine putting a hypervisor and hopefully keeping it all "silent" as to not allow users to detect what's going on. Also you would have to change the routing on all the machines in the network. BGP hijacking generally will require quite a function set from a router's firmware such as an ssh.
RE: Remote MITM attack?? - Asdethprime - Apr 26, 2019
This is generally done only by APTs but the way they go about doing this is slightly different.
Once u get into the network this is normally achieved by dropping a logging module on the wifi box. This can require you to drop a malicious driver on the wifi box or on rare occasion require you to flash and upgrade the device firmware.
CIA were using a similar tool and was name Flytrap.
RE: Remote MITM attack?? - xtdozo - May 8, 2019
You could leave a virtual machine connected to the network running anything you want using ARP poisoning and DNS spoofing