Tuesday, December 13, 2011

Sniff All Passwords on a Network




FOR EDUCATIONAL PURPOSES ONLY!

Please delete if it is repost....thank you!

This is going to be a really simple tutorial on how to do a MiTM (Man in The Middle) attack. It's a great thing to do at Wireless Hotspots. It's used to sniff any traffic that the slave is sending or receiving from the internet. What you basically do is put your computer in between the router and the slave computer and tell the slave that your computer is the router, and tell the router that your computer is the slave. That way any traffic that is sent or received is intercepted by your computer.

What you will need:

1. Cain and Abel- You can download it here: http://www.oxid.it/cain.html
2.*Optional- Wireshark- You can download it here: http://www.wireshark.org/

*Note: Wireshark is used for packet sniffing. Cain and Abel also has this tool built-in but Wireshark is much more detail.

Step One:

You need to connect to a Network (Wireless or Ethernet) and make sure that there's people connected to it. We can use Cain and Abel to find out if anyone is connected:

Click on the on the "Start/Stop Sniffer" button in the top left corner. Then click on the Sniffer tab below and click the "+" button.

Then click on the "All hosts in my Subnet" button and click ok. Now you should have a list of all the computers connected to the router.

Step Two:

Now we do the actual Attack. It's called APR Poisoning.

Click the "+" button and on the left click on the Router's IP (192.168.1.1) and on the right you should see all devices connected to the router. On the right select the devices you want to APR Poison and click Ok.

Now click on the "Start/Stop APR" button in the top left corner and now you're APR Poisoning the network.

Step Three:

Now we intercept the packets that the slave is sending and receiving. We can do this with either Cain and Abel or Wireshark. I'll show you both ways.

Method 1:

While in Cain and Abel, click on the "Passwords" tab and there you should see any passwords Cain and Abel detected.

Method 2:

Open up Wireshark

Now on the left click on your network device you use to connect to the internet. A new window should pop up and here you will see all the traffic that your computer is sending and receiving.

Personaly i think that the Cain and Abel method is much better and simpler.

Hope you enjoy this tutorial and tell me what you think ! good luck guys! anyway use english to indonesian translator to make you easy to understand.........

Disclaimer: I will not be liable for any loss,any physical injury or any lawsuit upon using this tutorial, use at your own risk ^_^

No comments:

Post a Comment