Original subtitles

Now the first step into running this attack is to clone the log in page that the people usually use

to log in to their network.

Now again I'm keeping this as generic as possible so you can use this method to clone any web page you

want to really.

Now I'm going to go to my Callimachi right here and I'm going to go ahead and connect to the network

that I want to target.

So I'm going to go here on the top and I'm going to click on Wi-Fi.

I'm going to select network and I'm going to select my target network right here which is called Royal

Wi-Fi.

I'm going to connect

and as you can see right here I'm connected to my target network.

Now usually the target network should automatically show you a log in screen if you're on an ad on a

smartphone or on Windows or even on x.

But for some reason actually it doesn't always show it to you automatically.

So you'll have to manually go to the web browser and then just browse for any web page.

So I'm just going to go to Google for example.

And as you can see I get automatically redirected to the captive portal log in page.

And first of all it's asking me to choose the language.

So I'm just going to click on English then it's giving me two options I can sign up and pay money or

I can just log in if I have a username and password.

So I'm going to log in.

And as you can see right here it's asking me for a username and password.

And then once I put the username and the password I can click on logon and then if the username and

password are correct it's going to let me into the network and then I'll be able to use the Internet.

So this is the page that we want to clone.

This is the page that we want to display to our target.

Once they can next to our fake access point so to close this web page we can actually just use a built

in functionality in Firefox.

So all we have to do is just click on the button on the keyboard that will display the menu bar here

on the top.

We're going to go to File Save page as.

And then I'm just going to select the location where I want to save this particular web page.

So I'm going to go to downloads and I'm going to create a new directory for it.

And I'm just going to call it royal log in page.

I'm going to create and it's automatically going to call.

This will come online and I've configured this to download the whole web page.

So as you can see here at the bottom right I have one page complete.

I'm going to click on Save and that's it.

Now the web page is downloaded in my downloads directory.

Now I'm going to quit this.

I'm going to go to the files right here.

I'm going to go to downloads and as you can see here I have my royal log in page.

The place where I downloaded the Pitt web page in and you can see we have two files right here related

to the web page we downloaded.

So first we have the web page itself right here and in here we have the files used by this web page.

So this will contain the images it will contain the javascript the style files and all that.

So if I doubleclick it you'll see I have.

Yes.

As files javascript files and pictures used inside that main logon page right here.

So when you're trying to clone this you need to use both of these because this web page right here refers

to the files inside this directory.

So if it can find the files in here the web page won't be displayed properly.

So if I just double click this real quick it's going to open in Firefox and as you can see it looks

very similar to the web page that way that the captive portal uses We can click on log in here we can

put a username and password and it's an identical replica of the web page used in the captive portal.

Now I'm going to quit this again because we can't share this with our users.

We have to put this into our web server so that we can redirect people to it and display to them when

they connect to our fake access point.

So I'm going to copy both of these files.

Then I'm going to go to my Webroot which is the location where you should store the files on your web

server that you want to show to the users that visit your web server.

So that's going to be in Vire W.W. hasty email.

Now I'm going to paste them in here.

And as you can see now I have my files here now by default the web server will display our page that's

called index or attached himself.

And as you can see here we automatically have a default index.

So you can either rename this or delete it.

I'm just going to delete it because I'm not going to use it.

Then I'm going to rename the welcome on line page so I'm going to write click it rename and I'm going

to name it.

Index to an HMO.

Now I did this so that when people access my IP so when they access my web server even if they don't

put a file name they'll automatically see this index page this page because I called that index or DML

and it's going to display the logon page that we just cloned.

So let's have a look on this.

I'm going to first of all we're going to have to start our web server and we can do that by doing service

Apache to start that will start my web server on.

Now I can go on Firefox again and I'm just going to go.

You can go to your own IP address or you can just go to localhost or 6:59 the zero those 0.1.

And this basically just tells the browser to open the web server installed on the current computer.

So it's your current IP and as you can see we'll automatically see the logon page that we cloned without

having to put anything in here.

We just put the address so in the future we're going to be put in our address on the network.

Right now I'm not connected to anything.

So I'm just put in 1 2 7 0 0 1 or you can put localhost.

And as you can see now web page works perfectly.

We can put a username and password and then if users see it it still looks identical to the page that

they use.