+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: MITM attack for iCloud Login Screen (Phishing) (/showthread.php?tid=6279547)
MITM attack for iCloud Login Screen (Phishing) - focuss - Sep 11, 2024
Is there a way to do a MITM using Kali Linux to target an iOS device on the same network and prompt them with the iCloud PIN screen?
RE: MITM attack for iCloud Login Screen (Phishing) - Fancy_Bear - Sep 11, 2024
(Sep 11, 2024 03:19 AM)focuss Wrote: Is there a way to do a MITM using Kali Linux to target an iOS device on the same network and prompt them with the iCloud PIN screen?
Yes, performing a man-in-the-middle (MITM) attack using Kali Linux can allow for interception of traffic between devices on the same network.
RE: MITM attack for iCloud Login Screen (Phishing) - DramaKing - Sep 11, 2024
(Sep 11, 2024 03:19 AM)focuss Wrote: Is there a way to do a MITM using Kali Linux to target an iOS device on the same network and prompt them with the iCloud PIN screen?
If you could redirect the target to a website that looked like the iPhone lock screen, then there's an incredibly remote chance that the target would think that the phone locked after going to a website. At least, I think that's what you mean.
RE: MITM attack for iCloud Login Screen (Phishing) - residentevilfour - Sep 16, 2024
Just use something like GoPhish to clone and host the login page. You'll have to get crafty with your URL, but the login page is the easy part. MITM would require being on the same network, while a hosted phishing page would not
RE: MITM attack for iCloud Login Screen (Phishing) - QuickBait - Sep 16, 2024
You can't just prompt something like that without some sort of "Pegasus" level exploit.
Just like DramaKing said, you can create an icloud phishing page, edit the dns records of your network and have it point all urls to your phishing page.
RE: MITM attack for iCloud Login Screen (Phishing) - bl4cklak3 - Sep 18, 2024
(Sep 11, 2024 10:29 AM)Fancy_Bear Wrote: Yes, performing a man-in-the-middle (MITM) attack using Kali Linux can allow for interception of traffic between devices on the same network.
GPT ahh reply
RE: MITM attack for iCloud Login Screen (Phishing) - Biggy_Asian - Sep 25, 2024
(Sep 16, 2024 05:59 AM)QuickBait Wrote: You can't just prompt something like that without some sort of "Pegasus" level exploit.
Just like DramaKing said, you can create an icloud phishing page, edit the dns records of your network and have it point all urls to your phishing page.
I am pretty sure most if not all of the pegasus exploits were patched already. Correct me if I am wrong.
RE: MITM attack for iCloud Login Screen (Phishing) - CHEMO - Sep 26, 2024
Best attempt is a Phishing and mirror the login page (the person will have to be illiterate and not read the URL (unless you obtain something good)). Have credentials or even keystrokes sent to server and then forward to legit panel for less flags being raised.