Original subtitles

1 1

Now, before doing anything, 2

2

I wanna show you the network settings of my Kali machine 3

3

So, I'm going to select it here. 4

4

I'm going to go to settings, network, 5

5

and as you can see, it's set to use a NAT Network. 6

6

So now, if I go to my Kali machine and do ifconfig, 7

7

we'll see we have an interface called E.T.H. zero. 8

8

This interface is a virtual interface 9

9

created by VirtualBox because we set 10

10

this machine to use a NAT Network. 11

11

You can also see that this interface has an IP address, 12

12

which means that is properly connected to this NAT Network, 13

13

and it will provide the Kali machine with internet access 14

14

as long as my host machine right here has internet access. 15

15

So now, on my Kali, if I go, and let's say 16

16

if I just go to Bing.com on my browser 17

17

you'll see that I can successfully go to the website 18

18

because Kali is connected to the internet 19

19

through this virtual interface that is called E.T.H. zero. 20

20

Now, if we go back to our diagram 21

21

that shows what we need to create an access point, 22

22

you can see that we need an interface 23

23

that is connected to the internet. 24

24

We don't care what type of interface this is, 25

25

as long as this interface has internet access. 26

26

So, in our example, we're gonna be using E.T.H. zero 27

27

to provide our fake access point with internet access. 28

28

The other interface that we need, 29

29

we said that this needs to be a wireless adapter 30

30

that is able to act as an access point. 31

31

Again, if I go back to the result 32

32

of my ifconfig, you can see I already have 33

33

a wireless adapter connected 34

34

to this computer; it's called lan zero. 35

35

Keep in mind that this is in Managed Mode. 36

36

It's not in Motor Mode, and it is not connected to anything. 37

37

So you can see it does not have an IP address. 38

38

This is very, very important. 39

39

It needs to be, first of all, in Managed Mode 40

40

and, second, not connected to any network. 41

41

So, even if we go at the Network Manager in here, 42

42

you can see we have Wired Connected. 43

43

This is my E.T.H. zero and Wi-Fi Not Connected. 44

44

Once we have everything configured properly, 45

45

you're ready to use Mana and, before we started, 46

46

we should modify its settings. 47

47

Mana's settings are stored in a text file. 48

48

So, to edit the settings, we're going to open this file 49

49

and edit it using Leafpad which is just a text editor. 50

50

So, I'm going to type Leafpad, 51

51

followed by the location of the file that we want to modify, 52

52

and the Settings File for Mana 53

53

is stored in E.T.C. 54

54

Mana Toolkit 55

55

Host A.P.D. 56

56

Mana dot conf. 57

57

So, all we're doing with this command is 58

58

we're using a text editor called Leafpad 59

59

to open a file that is stored in this path. 60

60

So when we hit Enter, you'll see 61

61

we have the text editor here opening the file for us, 62

62

and all of these are the settings 63

63

that you can modify for Mana. 64

64

You can actually get a full list and a full description 65

65

of all the settings that you can modify in this link 66

66

but we don't need this for now. 67

67

The main thing that you need to modify is the interface. 68

68

This is the interface that you want 69

69

to use to broadcast the signal. 70

70

So, basically, it is this component, and in my example 71

71

this is going to be lan zero; this is my wireless interface. 72

72

So I'm keeping this the same. 73

73

The next thing that you might want to modify 74

74

is the S.S.I.D.; this is the network name that will appear 75

75

when people look for Wi-Fi networks. 76

76

I'm going to keep this as internet 77

77

so when people look for networks, 78

78

they will see my fake access point under this name. 79

79

So I have nothing to say right now 80

80

but, if you modified anything, make sure you save the file 81

81

from File Save, and then close it, 82

82

and the next file that we'll need to modify 83

83

is the Start Script; this is the file 84

84

that will actually start Mana Toolkit for us. 85

85

Again, we're going to use Leafpad to open and edit 86

86

this file; so we're going to type Leafpad, 87

87

followed by the location of Mana's Start Script which is 88

88

in user share Mana Toolkit 89

89

run Mana start 90

90

NAT simple 91

91

dot S.H. 92

92

Now, in this file, there are two main things 93

93

that you need to modify; the first one 94

94

is the Upstream Interface; this is the interface 95

95

that has internet access so this is 96

96

this component right here and, as we've seen before, 97

97

this is E.T.H. zero in my case. 98

98

So I'm gonna leave this the same. 99

99

The next one, the P.H.Y., is again the interface 100

100

that is gonna broadcast the signal. 101

101

So, in my example, this is my wireless adapter, 102

102

and it is called lan zero- not lan one. 103

103

So I'm actually gonna modify this to lan zero 104

104

then I'm gonna save it Control 'S' 105

105

and quit it Control 'Q', 106

106

and that's it; we're ready to start the fake access point, 107

107

and like we said before, we're going 108

108

to be starting it using this script right here, 109

109

this start NAT simple; that's why we modified it. 110

110

So all we have to do is I'm gonna copy this 111

111

because that's its location. 112

112

So, in order to start it because this ends 113

113

with a dot S.H., we're gonna do bash 114

114

followed by the location of the script. 115

115

So what we wanted to modify using a text editor 116

116

we used the program called Leafpad 117

117

followed by the path of the file. 118

118

Right now, we don't want to modify it. 119

119

We want to execute the code inside it. 120

120

The code inside it is a Bash Script Code. 121

121

That's why we're saying I want to run this file using bash. 122

122

Now, I'm gonna hit Enter, 123

123

and, as you can see, it's telling me that the access point 124

124

is enabled, and I can press Enter 125

125

to kill the access point so to exit it. 126

126

Now, sometimes the first time that you run this script, 127

127

it will not work; it will actually give you an error. 128

128

So it's a good idea to actually just run the code again, 129

129

literally the same command, if it fills, if it complains 130

130

about the specific error, just run the command again, 131

131

and it might work, if it didn't work for the second time, 132

132

then ask me in the 'Q' and 'A' section, 133

133

and we will respond to you and help you fix this issue. 134

134

So now, let's go and try to connect to this network 135

135

and see if it actually works. 136

136

So right here, I have a windows machine. 137

137

It's another virtual machine, but 138

138

I have another wireless adapter connected to this machine. 139

139

Do not test this from your host machine 140

140

because the fake access point is getting its internet access 141

141

from the host machine through the NAT Network. 142

142

So, if you test this network from the host machine, 143

143

the network will not work. 144

144

So, either test it from another virtual machine 145

145

with another wireless adapter 146

146

or, if you don't have another wireless adapter, 147

147

then you can test it from your phone 148

148

or from another laptop or any other computer within range, 149

149

but do not ever test it from the host machine. 150

150

So right here, I'm going to search 151

151

for networks to connect to, 152

152

and, as you can see I have a network called Internet. 153

153

It does not use a password 154

154

so I'm just gonna connect to it. 155

155

As you can see, I'm connected now, 156

156

and I'm gonna open Firefox just to check if 157

157

I have internet connection so I'm going to go to Bing.com, 158

158

and, as you can see, Bing.com's loading. 159

159

So now, I actually have internet access. 160

160

So now, anything I do on this computer 161

161

will have to be sent to the access point. 162

162

If I want to access any websites, 163

163

if I enter any passwords and usernames, 164

164

everything is going to go to the access point, 165

165

and the access point is the hacker machine 166

166

so the hacker machine is already the man in the middle. 167

167

So now, you're at the same position 168

168

that you would be after running an A.R.P. spoofing attack. 169

169

So you can go ahead and use Wireshark 170

170

to sniff packets and analyze them, 171

171

or you can go and use man in the middle left 172

172

exactly as I showed you before. 173

173

The only thing that you need to keep in mind 174

174

when using Wireshark or man in the middle left 175

175

or any other tool unique to set the interface 176

176

to the interface that is broadcast in the signal. 177

177

So this is the interface that you set in the P.H.Y. option, 178

178

not in the Upstream; so in my case right now 179

179

this would be lan zero, not E.T.H. zero. 180

180

Also, if you're going to use man in the middle left, 181

181

theoretically you wouldn't need to use the 182

182

dash dash A.R.P. dash dash spoof argument, 183

183

but I noticed that the tool will not work 184

184

unless you add that argument so you can add it in, 185

185

and you'll see that it'll work exactly as shown before.