‫Oh, yes, there's plenty more to do.
‫There are several tools to perform an art spoof attack, such as art spoof, the command line tool,
‫which is embedded in COLLY, but we're going to use AACAP for the demonstration of the art spoof attack.
‫AACAP is a free and open source network security tool for men in the middle attacks on LAN.
‫It works by putting the network interface into promiscuous mode and by art poisoning the target machines,
‫thereby it can act as a man in the middle and unleash various attacks on the victims.
‫AACAP has both a command line interface version and a graphical user interface version, let's see them
‫both in action.
‫First, let me show you the command line version of AACAP.
‫So this is my network created in three.
‫I have a collie and a wasp bue and a exploitable VM and the network.
‫So use if config inside the VMS to check the IP addresses and the other interface configurations as
‫well.
‫So paying each other to be sure that they can communicate.
‫OK.
‫Now I go to Carly overdetermined screen and do the same here, check the interface configuration and
‫ping other VMS.
‫Yep, everything's OK.
‫So let's look at the art table of Metters voidable type Arben and Press enter.
‫So currently, there are two records in the ARP table of boy, one for Collee and one for Oos Liwei.
‫Now, let me show you something, if you want to perform an art spoof attack, you should enable IP
‫forwarding in your attacker system so that the packets will not end on your attacker system and be forwarded
‫to the destination system.
‫Otherwise, you'll block the traffic between the victim and the spoofed system.
‫Check that out.
‫So the IP address is managed by a variable IP forward like in Collie.
‫And to look at the final content type.
‫Cat piracy exists, Agnete IPV for IPE Forward and press enter.
‫Its value is zero, so to enable it, it has to be one, so I'll change it.
‫You can open the file with a text editor and change the value, but here I'll just simply use the Echo
‫command for this purpose.
‫Echo one.
‫Greater than sign the entire file name.
‫So check the file again.
‫And yes, its value is now one.
‫Now, please note that AACAP enables IP forwarding automatically, even though you don't enable it manually.
‫All right.
‫I want you to know what's happening behind the scenes, so to speak.
‫All right, so now is the time of the attack before creating the command, let's see the manual of etiquette.
‫So type man etiquette and press enter.
‫So here's the short definition and the long description targets.
‫M four men in the middle Midem attack.
‫So these are the Midem attack types, AAB, is it the first line and the others, ICMP, DHP, et cetera.
‫And here are the user interface options t for the text only interface.
‫Anyway, let's just create the command.
‫So first, the command itself, aacap I the interface either zero T for the text only interface type.
‫M to make it admit m attack and select the Midem attack type AAFP column remote.
‫So the first IP specifies the IP address, which will be spoofed and the second IP address is the victim
‫system, so that means there will be a row in the Métis spoils ARP table with a Collie's Mac address
‫and a WASP Busways IP address.
‫And that means when Metastable Voidable wants to send a packet to always be that way, it will be sent
‫to Colly instead.
‫Right.
‫And with the help of IP forwarding, the packet will arrive at OAH Speedway finally.
‫Now, please don't forget to use these slashes at the beginning and end of each I.P. address, the command
‫is ready to run.
‫So let's see what it does.
‫Hit enter.
‫And here's a summary of the attack, the victims.
‫Interface type, et cetera, now go to med exploitable AAFP RN to see the table again.
‫And as you can see here, the first record is for Caylee, so please look at the Mac address and the
‫second record is for Oos Way.
‫But with the attackers, Mac address, any packet sent from Métis voidable to Odwa Speedway will visit
‫Colleano.
‫So let's create a telnet connection to Port 80 of a WASP Bayway.
‫Type Telnet, or WASP, BBWAA, IP and the Port 80 now hit enter pipe get slash HTTP 1.0 and press enter
‫twice.
‫And here is the HTTP response, the main page of Oos BBWAA.
‫Now, let's go back to Cali and see what happens.
‫So these are all the TCP packets sent for Métis voidable to Walwa Speedway backpack at Fehn Packet and
‫scroll up a bit and here's a telnet connection.
‫Results HTP response.
‫Keep going up.
‫We can find some other critical data here to.
‫And here are some credentials, for example.
‫In the terminal screen where AACAP is running, you can use control, see to end the attack.
‫So there it is.
‫It's not.
‫Now go back to med exploitable and look at the art table again.
‫Now, the IP address of Oos BWA is matched with a correct Mac address.
‫Now, you might remember what I told you before that, well, I hope you remember everything that I
‫told you before, but in particular, AACAP has a graphical user interface as well.
‫So let's have a look at Etiquettes GUI right now.
‫Again, we're in Colly Click Show applications, menu item and type better cat.
‫And here you go.
‫You'll find the AACAP GooYa.
‫So these are both AACAP gooey apps, you can just simply click one of them.
‫I want to show you, though, another way to start the app from the upper left corner applications go
‫to sniffing, spoofing tools and select AACAP Gooey.
‫OK, so here we are at the main panel of the outer category.
‫We'd better check the network, so I'll open up a terminal screen and ping the other VMS at a schoolboy
‫table and it was BWI.
‫Yeah, everything looks OK, so go to the sniff menu and AACAP and select Unified Sniffing.
‫Asking for input interface is good click OK, if you look at the AACAP menu, it's totally different
‫now.
‫To go to host and select Skåne for hosts, it's a kind of a ping scan to find out the devices of the
‫network found five devices and added them to the host's list.
‫So go back to host again and now select hosts lists and here's a list, very nice.
‫Works well.
‫One nine two one six eight one zero one one is a WASP Vidalia.
‫So this is the system that will spoof so selected and quick and to target to.
‫So one nine two one six eight one zero one two is met us voidable, that's our victim.
‫So we'll change its to our table, select it and click add to target one.
‫I think now we're ready to attack.
‫What do you think?
‫All right, so let's go to Midem and quick AAFP poisoning.
‫OK, check this sniff remote connections option and click, OK?
‫And the final step, go to start and select, start sniffing.
‫So the attack has begun.
‫Let's go to Matt Exploitable and see the attack result to see the ARP table type RPN and press enter.
‫The first row is for Oos BWL, but the Mac address is Collie's Mac to show it now while paying Colly
‫to create the AAFP record.
‫Run the command again, and now I have another word for Collee and both Collee and Oos BWA of the same
‫Mac address.
‫OK, you know, the rest the package will be sent to Colly instead of Oos Bue, so if you like, you
‫can open Wireshark and collect the fruits of your labor.
‫Enjoy it.