Original subtitles

Once we get all the IP inside the network we need to know which one is the gateway which is the router

because most probably I'm going to need to intercept the traffic going to the router which will be Zahed

intercept all traffic going to the Internet.

I don't want to intercept think traffic or traffic or any traffic that is useless for me.

I need to intercept the traffic that is going to the Internet because this is the traffic that has credential

or have some information.

Now how can I know which one is the router IP.

Actually it's quite easy if you are not aware or you can check any machine Windows machine and check

what is a gateway or in such case you can open a terminal open a terminal inside Linux and type IP code

and I pollute will show you the gateway of this machine which will be the same gateway for all the machine

in the Senate.

So just by typing IPs based route which means show me the root of any IP it will show you that the route

is 1 and 2 and 6 8 1 4 2 2.

This is the router right.

So I know that this is a router so I'm going to click on this one and then I'm going to click on Add

to target one then I can choose any other computer on the network and I can choose to target two or

I can keep it this way.

And according to that he will intercept all of them.

Once I do that I'm just going through the basics.

OK.

So get to the basics and then we'll do a full attack by just showing you around the menu.

So once I do that and identifies the machine and which one will be the gateway and I signed that way

to target one second step would be going to empty manage the middle attack this menu and choose are

poisoning and choose the first one which is sniffer remote connection and we are set to go then start

and start sniffing.

And now is sniffing any of those any traffic from those computers going to the Internet.

It could be a username and password could be anything.

But this is not the interesting part of the Issaka because actually many many program is doing that

in a much easier way.

And I suggest to check Cain and Abel It's an amazing Windass.

But there are things that exist in in-circuit and very very very few programmer doing that.

Is changing in traffic not just intercepting but changing how can we do that.

So to be able to do that we have a menu here called plug ins.

And when you go there and click on plug ins or Mohnish plug ins you'll see all the plugins that can

be able to fight this stuff.

So you will see for instance DNS poisoning which you're going to do in your next lecture DNS poisoning

main intercept traffic that resolves from name to IP and change it.

And we're going to see an example of that.

I'm going to show you how dangerous it is we can see and strip which is another attack that allows you

to intercept encrypted traffic because usually if you intercept an encrypted traffic you'll be capturing

traffic but unreadable.

So what is use of it.

But if you use a cell strip it will allow you to intercept encrypted traffic and read it.

You can intercept regular traffic and change it so it's from here that you are applying a plug in this

plug in will be applied on the traffic going between the two targets that you specify.

So what we're going to do on the next lecture we're going to repeat this attack but I'm going to choose

one specific traffic or one specific plug in which is a DNS spoofing.

And let's see how we can do a full attack using ease of kept intercepting the traffic and change in

size that are.