Arp Spoofing, DHCP Spoofing, ICMP Redirect and more

In this video we demonstrate how to perform a number of man in the middle attacks and compare how they perform against eachother.
Twitter: / demmsec
Facebook: / demmsec
Forums: www.demmsec.co.uk
1on1 Ethical Hacking Tutoring by DemmSec - infosec.social...

[@AronRiddiough]

i do apologise for the microphone quality and loud noises, i have bought a better microphone so future videos will be better quality.

[@leokrs]

Cool... I watched it first and will test it in my Lab. I will give my feedback.. Thx for sharing this info!!

[@Octa-x1]

there isn't icmp redirection in this video?

[@cyberdyne4994]

ok i have done some tests and need your help , i did arp spoofing using Ettercap , and i changed the etter.dns to redirect client to my Kali machine & then i did Dns Spoofing and it Worked Great and redirected the client succssfully , the only problem that the client disconnects from the internet , Is it anyway to Dns spoof the target without make him lose his Internet connection please Contact me back ASAP

[@kgarred]

nice job Dale and Aaron. How about doing a vid on your favorite attacker machine configs? Things like browser plugins and such.Things like HTTPS Everywehre, Ublock Origin, NoScript, etc. Also some of your favorite tools you add to Kali etc. Thanks again

[@DemmSec]

+Keith Garred Thats an awesome idea! We'll definitely do that

[@maximada2003]

Surprised you didn't use MITMF which in my oppinion is the best.

[@doobarasmart]

well on a virtual network this work perfectly but on a real network with router it doesn't work no matter what I do as if the router have a some kind of security against the spoofing

[@anisyusufzai8486]

does these attacks bypass 802.1x authentication???????and how do we launch an attack on a network without connecting to it meaning were connected to internet but were not connected to the specific wireless network????thank you

[@robokishan]

Good videos please keep it up and dont stop uploading videos you guys awesome!!!

[@Kissdaboss]

Is there any tutorial or resources you have how to defend these attacks or how to implement them? Thanks!

[@timmyisdabom]

long time no see

[@farnoodp]

great video guys

[@krishnastudio5487]

Which is the best mitm attack???

[@bandanapro9529]

Wow cool video! Haven't seen you for a while. Also please make a video about mitmf, I think you can get it with apt-get in kali and it's really powerful, somehow it works with https too I think. It would be cool to see a video about how it works and what are the possible attack methods with it (only for education purposes of course ) oh and for ethical stuff yes only ethical

[@AronRiddiough]

+BandanaPro Thanks for the suggestion and comments, we will take note of it.

[@lexrylands288]

Why does the msf for windows come up in my AV as a nice big list of trojans?

[@DemmSec]

+Lex Rylands Because thats what it is... You need those to exploit another computer. It's why I recommend running it on a different system so your AV doesnt nuke it

[@omgwtfbbqalekx]

If you're interested in "Ettercap", check out "Bettercap". :)

[@vaibhavgupta20]

does bettercap have GUI?

[@alilou5528]

Vaibhav Gupta No 😉😉

[@raaifhussain930]

Ok so i setup Virtualbox in my kali linux and i installed windows xp in it. So can you tell me how i should setup my Internet in the virtual box so when i do a scan on armitage on kali linux that my virtual machine will show up in armitage :P

[@ir4640]

I have remote access to router page, what can i do now

[@HotNitrogen]

Does disabling WPAD have any massive drawbacks? Say if in the case I had to use a corporate or university wifi. Will it affect me much?

[@DemmSec]

+jonnyh1994 No. Its not used very often at all. Usually if youre using corporate machines the proxy settings are roled out via Group Policy. Turning off WPAD is fine :)

[@HotNitrogen]

Okay, thanks. I'll look into turning it off then! Make's me wonder why they're not off by default if it's rarely used!

[@zacksthilaire4072]

can u use tunnels without internet or nn ??

[@cesarr.3377]

cool video. But attacks like this are very easy to prevent. Just statically map the MAC address of your default gateway arp -s

[@DemmSec]

+Cesar R. So that stops Arp Spoofing... Now the rest?

[@cesarr.3377]

+DemmSec Well... DHCP spoofing is useless if you disable lease expiration on your servers, and ICMP can be disabled altogether via your computers firewall settings

[@DemmSec]

Shame nobody seems to do any of that.

[@arsailor2341]

You should make a tutorial on how to get around packet inspection

[@foxie2838]

Why no videos on long time?

[@vaibhavgupta20]

Wireshark on Kali VMware is automatically capturing packets from Windows 7 in VMware without any man in the middle attacks. does anyone know? what is the solution to this?

[@heephstan]

promiscous mode.

[@RobbyJHope]

If you can even get Kali to work anymore. Fuckin hell, they suggest their updates but they break your machine!

[@tagrikli]

Why do we write "echo 1> /proc/sys..." ? What is the point?

[@oxinous3694]

Tuğrul Ağrikli enable port forwarding

[@DemmSec]

+Tuğrul Ağrikli (Sitricasit) if you don't do that your system won't 'forward' packets

[@hughjones1906]

open Port Mapping

[@Grimpep]

can you do a tut about winrar passwords?

[@patrickswain3977]

I really wish someone could teach me to hack...Can someone help?

[@bobobobko]

Make your own tools skiddy

[@Max-qc4ow]

+bobobobko To fucking good... Shut the fuck up kid. like you can fucking hack or code at all, Jesus fucking Christ do your fucking research.

[@Max-qc4ow]

bobobobko Sure bud... I bet you hack everything, just because you're on the internet doesn't mean you have to lie bud.

[@HotNitrogen]

+bobobobko why waste time making tools when there already out there? No point trying to reinvent the wheel

[@zacksthilaire4072]

and also DNS

[@hurasane]

Wow the audio on this was terrible. None the less thanks for the video.

[@VBtutorails]

Most likely because the other guy is on Skype.

[@ref3665]

subbed;D

internet explorer sucks use waterfox 64 bit browser :) thank me later!

[@DemmSec]

+Jay Mee Neither of us use IE, that was just a virtual machine