ZexoCard: no-KYC virtual crypto cards ◆ Private Crypter - Unique Private Stubs ◆ Traffic service & campaign optimization ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking Hacking Tutorials › Simple Man in the middle attack on windows.

New Reply 

Simple Man in the middle attack on windows.
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Dec 22, 2016 01:21 PM (This post was last modified: Dec 22, 2016 01:22 PM by Mr. Robot.)
So very simple and basic MiTM attack on windows.

Download
www.winpcap.org/install/

Download
http://nighthawk.software.informer.com/d...d/?ca8e7c2
(you can compile it yourself from the github)


Download
https://sourceforge.net/projects/etherwatch/


NightHawk - simple man in the middle with arpspoof for windows, similar to cain and abel but easier to use and navigate. Shows http logins. Doesn't re-arp itself from what I can see which can cause internet to stop after 10 minutes or so.

Winpcap - is the driver/file you need to allow your card to do this kind of activity.

Etherwatch - for monitoring images traveling through your network.


After installing winpcap drivers, we can go ahead and open up nighthawk and choose the adapter connected to the internet at the top and choose advanced mode.

[Image: 3w0QNeg.png]


Then we want to hit Scan Network to find the IPs of machines on your LAN.

[Image: dlBqxYC.png]

Once we have decided which computer/phone/device we want to intercept, we click the ipv4 address of it in the "Target 1 box" and in the "Target 2 box" we want to choose your router/gateway IP. To find this we can open up CMD and type in ipconfig -

[Image: FfdxfDp.png]

Once we have chosen the gateway and the target, we can hit "Start Sniffer" and "Start ARP spoofing"


Next we can click on the "Sniffer" tab at the top and wait for any http login forms.

On the device you are intercepting, you can go to http://aavtrain.com/ and type in a username and password, and it will show up in the sniffer tab on your PC.

[Image: qKytEiK.png]



- One issue with etherwatch is loading sites such as imgur.com with https will crash it.
If that is all working and you are now MiTM you can open up etherwatch - Install it and run it.

Once open, choose your network card and it will start monitoring everything that happens through your adapter - which will mean the MiTM you have running will collect the images too.

With etherwatch you can move images around and WARNING: Potential SPAM or INFECTED LINK the IP or to only monitor images from that IP.

[Image: eFz2iF5.png]


[Image: Y9pNlGa.png]
ze-slade
ze-slade Offline
irrelevant.
***
HF Ub3r
Posts:
4,268
Threads:
343
Credibility:
000
Popularity:
6
βytes:
β 0
Game XP:
0
Dec 22, 2016 01:23 PM
Looks like a pretty good tutorial, It's tempting to try this out. I never got into mitm attacks, but I always wanted to try one.
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Dec 22, 2016 01:25 PM
(Dec 22, 2016 01:23 PM)ze-slade Wrote:  Looks like a pretty good tutorial, It's tempting to try this out. I never got into mitm attacks, but I always wanted to try one.

This is a very basic one and wasn't going to put it up as the same can be accomplished with say cain and abel.

The main purpose it to show it can be done, while not as stable as running one on linux - it can be achieved and I will be hopefully working with other users in 2017 to make a completed tool that works 10x faster and better.

These tools are quite outdated and were never really complete so that's unfortunate as I think MiTM attacks are one of the best tools for network infiltration and monitoring.
Megabear
Megabear Offline
[closed@HF:]
Posts:
545
Threads:
31
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 22, 2016 01:26 PM
Woah.
This is dope Robot.
=)
I am gonna try this out soon on my windows.
Thanks for helping the community out. :)
ze-slade
ze-slade Offline
irrelevant.
***
HF Ub3r
Posts:
4,268
Threads:
343
Credibility:
000
Popularity:
6
βytes:
β 0
Game XP:
0
Dec 22, 2016 01:27 PM
(Dec 22, 2016 01:25 PM)Mr. Robot Wrote:  This is a very basic one and wasn't going to put it up as the same can be accomplished with say cain and abel.

The main purpose it to show it can be done, while not as stable as running one on linux - it can be achieved and I will be hopefully working with other users in 2017 to make a completed tool that works 10x faster and better.

These tools are quite outdated and were never really complete so that's unfortunate as I think MiTM attacks are one of the best tools for network infiltration and monitoring.
Interesting, that's great to hear you'll be working on a better tool, are you planning on selling it or making it free?
fannas1
fannas1 Offline
Equilibrium
**
HF Ub3r
Posts:
326
Threads:
11
Credibility:
000
Popularity:
62
βytes:
β 0
Game XP:
0
Dec 22, 2016 01:28 PM
Posting to come back and try this tutorial out. Thank you OP very interested in this.
[Image: fanassig.gif]
ZuGgY
ZuGgY Away
✘O ❌⭕⌘☕⚓⚫♿♋✅⚖✍⚠✨⚡⭐❤️★ ┌∩┐(◣_◢)┌∩┐ ★
*****
HF Ub3r
Posts:
20,971
Threads:
3,301
Credibility:
800
Popularity:
349
βytes:
β 5,613.2
Game XP:
0
Dec 22, 2016 01:29 PM
Thanks for this wonderful tutorial as always!
[Image: Go9NL9v.png]
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Dec 22, 2016 01:30 PM
(Dec 22, 2016 01:27 PM)ze-slade Wrote:  Interesting, that's great to hear you'll be working on a better tool, are you planning on selling it or making it free?

I had plans on selling it for reasonably cheap maybe $5-$20 for a fully working one with modules for code injection and fun scripts similar to what zANTI runs (replacing downloads,flipping images,replacing images)
ze-slade
ze-slade Offline
irrelevant.
***
HF Ub3r
Posts:
4,268
Threads:
343
Credibility:
000
Popularity:
6
βytes:
β 0
Game XP:
0
Dec 22, 2016 01:32 PM
(Dec 22, 2016 01:30 PM)Mr. Robot Wrote:  I had plans on selling it for reasonably cheap maybe $5-$20 for a fully working one with modules for code injection and fun scripts similar to what zANTI runs (replacing downloads,flipping images,replacing images)

Makes sense, good luck with your project and any future ones to come!
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Dec 22, 2016 02:37 PM
Would appreciate for people to try this out and post back results.
DatNigguh
DatNigguh Offline
[n00b@HF:]
*
Registered
Posts:
71
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 22, 2016 08:20 PM
I plan on it in a week or so buddy, thanks for the tutorial and I'd be interested in purchasing a solid tool from ya!
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Jun 8, 2018 05:28 AM
(Dec 22, 2016 08:20 PM)DatNigguh Wrote:  I plan on it in a week or so buddy, thanks for the tutorial and I'd be interested in purchasing a solid tool from ya!

Not a problem, still working on this tool years later. No help and no clue as to what I am doing. Learning as I go.
Aries Devil
Aries Devil Offline
[n00b@HF:]
*
Registered
Posts:
3
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jun 10, 2018 06:46 AM
nice tut man...keep it up
actuall55
actuall55 Offline
[n00b@HF:]
*
HF l33t
Posts:
22
Threads:
4
Credibility:
000
Popularity:
18
βytes:
β 0
Game XP:
5
Jun 22, 2018 05:50 PM
Nice Tutorial it seems very useful for monitoring other people who shouldn't be on my network
Bossbitch24
Bossbitch24 Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jun 22, 2018 06:12 PM
Looking for a legit spammer that have bank logs
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by spirited_wolf™Jul 17, 2022 11:18 PM 37 2,818 Jul 17, 2022 11:18 PM
Last Post: merdeux
by rynetJun 25, 2018 09:25 AM 4 655 Jun 25, 2018 09:25 AM
Last Post: Gr0undZ0
by AntraxtApr 29, 2016 07:35 AM 2 321 Apr 29, 2016 07:35 AM
Last Post: karencho7777