[focuss]

Is there a way to do a MITM using Kali Linux to target an iOS device on the same network and prompt them with the iCloud PIN screen?

[Fancy_Bear]

Is there a way to do a MITM using Kali Linux to target an iOS device on the same network and prompt them with the iCloud PIN screen?

Yes, performing a man-in-the-middle (MITM) attack using Kali Linux can allow for interception of traffic between devices on the same network.

[DramaKing]

Is there a way to do a MITM using Kali Linux to target an iOS device on the same network and prompt them with the iCloud PIN screen?

If you could redirect the target to a website that looked like the iPhone lock screen, then there's an incredibly remote chance that the target would think that the phone locked after going to a website. At least, I think that's what you mean.

[residentevilfour]

Just use something like GoPhish to clone and host the login page. You'll have to get crafty with your URL, but the login page is the easy part. MITM would require being on the same network, while a hosted phishing page would not

[QuickBait]

You can't just prompt something like that without some sort of "Pegasus" level exploit.


Just like DramaKing said, you can create an icloud phishing page, edit the dns records of your network and have it point all urls to your phishing page.

[bl4cklak3]

Yes, performing a man-in-the-middle (MITM) attack using Kali Linux can allow for interception of traffic between devices on the same network.

GPT ahh reply

[Biggy_Asian]

You can't just prompt something like that without some sort of "Pegasus" level exploit.


Just like DramaKing said, you can create an icloud phishing page, edit the dns records of your network and have it point all urls to your phishing page.

I am pretty sure most if not all of the pegasus exploits were patched already. Correct me if I am wrong.

[CHEMO]

Best attempt is a Phishing and mirror the login page (the person will have to be illiterate and not read the URL (unless you obtain something good)). Have credentials or even keystrokes sent to server and then forward to legit panel for less flags being raised.