[Kafyhrer]

Man in the middle is one of the best (in my oppinion) attacks, reffering to local networks.
It works, by interfering between the victim and the web server like so:

In this tutorial, i would like to explain how to execute it, in order to obtain valuable login credentials for facebook.
Then, you can even be able to modify it properly for other websites...
The steps for such an attack are the following:
1) Create a server in the attacker computer.
2) Design and install a fake page that will store the login credentials in a specified text file, before sending them to the web server.
3) Do an APR (ARP Poisoning Routing), in order to make the victim think it's the webserver, and not the attacker talking to it.

Do this here are the instructions:
0) Buy a coffee.
a) Install XAMPP (http://www.apachefriends.org/en/xampp.html)

b) Download and extract this archive (https://docs.google.com/file/d/0Bx34Eemx...sp=sharing)
c) Copy the contents of the fb folder in C:\xampp\htdocs.
d) Go to XAMPP control panel and run the APACHE and MySQL service.

e) Test if the server is up and working by entering: http://localhost/ in any web browser.
f) Install Cain & Abel (http://www.oxid.it/cain.html)
g) Click the start/stop sniffer.

h) Choose your interface for sniffing and click OK.
i) Click again the Start/Stop Sniffer to activate the sniffing interface.
j) Go to the Sniffer tab and then click the cross.

k) Leave all hosts in my subnet selected, and press OK.
l) From the list of target ips that come up, find your target.
m) Click the APR tab at the bottom of the window.
n) Click the cross button.
o) Find your victim, click on its ip, select the appropriate gateway and press OK.
p) Find your computers local ip address by running ipconfig in command prompt.

q) Click APR-DNS and then the cross again.
r) Type in facebook.com at the first box and the attacker server ip at the second, and then click OK.
s) Click the Start/Stop APR button.

t) Enjoy your coffee, as the victim gets traped.
u) Once he falls for the trap you will have his login details in a txt file inside C:\xampp\htdocs.

I hope you enjoy yourselves doing this...
Few weeks ago I stole 6 facebook accounts, using this method, in my local starbucks, so why wouldn't you do the same??
No piece of machinery or human was harmed using this method, and I made sure that all the login details were changed after i stole them...

[Kafyhrer]

Man in the middle is one of the best (in my oppinion) attacks, reffering to local networks.
It works, by interfering between the victim and the web server like so:

In this tutorial, i would like to explain how to execute it, in order to obtain valuable login credentials for facebook.
Then, you can even be able to modify it properly for other websites...
The steps for such an attack are the following:
1) Create a server in the attacker computer.
2) Design and install a fake page that will store the login credentials in a specified text file, before sending them to the web server.
3) Do an APR (ARP Poisoning Routing), in order to make the victim think it's the webserver, and not the attacker talking to it.

Do this here are the instructions:
0) Buy a coffee.
a) Install XAMPP (http://www.apachefriends.org/en/xampp.html)

b) Download and extract this archive (https://docs.google.com/file/d/0Bx34Eemx...sp=sharing)
c) Copy the contents of the fb folder in C:\xampp\htdocs.
d) Go to XAMPP control panel and run the APACHE and MySQL service.

e) Test if the server is up and working by entering: http://localhost/ in any web browser.
f) Install Cain & Abel (http://www.oxid.it/cain.html)
g) Click the start/stop sniffer.

h) Choose your interface for sniffing and click OK.
i) Click again the Start/Stop Sniffer to activate the sniffing interface.
j) Go to the Sniffer tab and then click the cross.

k) Leave all hosts in my subnet selected, and press OK.
l) From the list of target ips that come up, find your target.
m) Click the APR tab at the bottom of the window.
n) Click the cross button.
o) Find your victim, click on its ip, select the appropriate gateway and press OK.
p) Find your computers local ip address by running ipconfig in command prompt.

q) Click APR-DNS and then the cross again.
r) Type in facebook.com at the first box and the attacker server ip at the second, and then click OK.
s) Click the Start/Stop APR button.

t) Enjoy your coffee, as the victim gets traped.
u) Once he falls for the trap you will have his login details in a txt file inside C:\xampp\htdocs.

I hope you enjoy yourselves doing this...
Few weeks ago I stole 6 facebook accounts, using this method, in my local starbucks, so why wouldn't you do the same??
No piece of machinery or human was harmed using this method, and I made sure that all the login details were changed after i stole them...

[Kafyhrer]

This reply has only one use: to make my thread climb up, so i can hear some oppinions !!!

[xevenofhearts]

This reply is useless, i just want my thread to climb up, so i can hear some oppinions !!!

Is that so?

Then that useless reply shouldn't be there. Change that.

[Kafyhrer]

I changed it...

[ChiefofGrief]

I'll have to do this next time at starbucks lol

[RawkstarA]

Is it working? :/

[RawkstarA]

Is it working? :/

[behehe hacked]

i didnt knew about that . nice guide