[MITM]FaceBook Cookie Stealing On Linux

Here is how to access someone's facebook on your network

Facebook send a cookie to the person loggin in in order to keep him signed in
so our job is to get that cookie and use it to bypass login so we can use that facebook account without user/pass.

Since im doing it from ubuntu, i need to install all the tools needed, here they are:

______________________________________________________________________________________

Gather your tools:

[*] Add grease monkey to firefox

[*] Install the greasemonkey cookie injector script from here

Spoiler:

Copy and past the javascript and save it as Snipa@HackCommunity.user.js

Spoiler: image

To install the script just drag and drop it in your firefox page

Spoiler: image

A box will pop up to install the script just click install

Spoiler: image

(note that greasemonkey should be enabled and you need to restart firefox in order to work)

[*] Install ettercap

Spoiler:

[*] Install SSLstrip

Spoiler:

[*] Install dsniff

Spoiler:

[*] Install wireshark

Spoiler:

______________________________________________________________________________________

Explanation:

To get the cookie , we need to see the traffic on our network, this is why we need wireshark
One problem oppose, we want to see data send to/from a certain ip address , this mean you need the local ip of your target ; in this case its 192.168.1.104
Now we capture the cookie, and use it to login to facebook, this is done with greasemonkey

______________________________________________________________________________________

The attack:

[*] Enable ip forwarding to be able to resend data that we get

Spoiler:

Code:
to enable ip forward:
sudo sysctl -w net.ipv4.ip_forward=1
to check if done corretly:
cat /proc/sys/net/ipv4/ip_forward

[*] Enable ip tables to redirect the target from port 80 to 1000 for SSLstrip to work

Spoiler:

[*] Start SSLstrip

Spoiler:

[*] ARPspoofing to position ourselfs between the router and the client (target)

-dsniff-

Spoiler:

[*] Start wireshark and select an interface to start seeing the traffic

Spoiler:

[*] Type this in the filter, and wait for the target to login on facebook

Spoiler:

[*] When he login, you will see this, just copy the printable text only, like i did

Spoiler:

[*] Now inject the cookie in your webbrowser, go to facebook, and press ALT+C to see this input box, and past there

-grease monkey-

Spoiler:

[*] You can now refresh facebook, and there you go, you are logged in

Spoiler:

______________________________________________________________________________________

Spoiler:

Copy and past the javascript and save it as Snipa@HackCommunity.user.js

Spoiler: image

To install the script just drag and drop it in your firefox page

Spoiler: image

A box will pop up to install the script just click install

Spoiler: image

(note that greasemonkey should be enabled and you need to restart firefox in order to work)

[*] Install ettercap

Spoiler:

[*] Install SSLstrip

Spoiler:

[*] Install dsniff

Spoiler:

[*] Install wireshark

Spoiler:

Code:
to enable ip forward:
sudo sysctl -w net.ipv4.ip_forward=1
to check if done corretly:
cat /proc/sys/net/ipv4/ip_forward

[*] Enable ip tables to redirect the target from port 80 to 1000 for SSLstrip to work

Spoiler:

[*] Start SSLstrip

Spoiler:

[*] ARPspoofing to position ourselfs between the router and the client (target)

-dsniff-

Spoiler:

[*] Start wireshark and select an interface to start seeing the traffic

Spoiler:

[*] Type this in the filter, and wait for the target to login on facebook

Spoiler:

[*] When he login, you will see this, just copy the printable text only, like i did

Spoiler:

[*] Now inject the cookie in your webbrowser, go to facebook, and press ALT+C to see this input box, and past there

-grease monkey-

Spoiler:

[*] You can now refresh facebook, and there you go, you are logged in

Spoiler:

______________________________________________________________________________________