SESSION HIJACKING IN ETHICAL HACKING

ETHICAL HACKING SESSION HIJACKING

So far we've seen how we can capture passwords from any computer that is in our network and we see how we can even bypass TTP to capture passwords from famous websites that try to use encryption. What is the target person? Never actually enter their password. What if they use the Remember Me feature.  So when they go to their website they already get logged in to that website.   That way they never enter the password the password is never sent to the server and therefore will never be able to capture the password because it's not even sent.   So let's have a look at the so on my computer and if I go to Dailymotion I've already logged in there   and I clicked on the Remember 

Me feature.   So if I go to that Web site you'll see that I will already be logged into my account without having to enter my password.   So in this case the users actually get authenticated based on their cookies.   So the cookies are stored in the browser.   And every time the person tries to go to the Web site they will be authenticated to their website based on the cookies.   So all we can do is we can sniff these cookies and inject them into our browser.   And therefore well be able to log into the account without entering the password.   Exactly the same way that the target person is being authenticated to their account.   So to do that was going to use a tool called Ferrett and it doesn't come in installed with Kelly So to install it you're going to have to run up to get install for it.  Hijack how.   I already have it installed here so I'm just going to show you how to do it.   So very apt-get the package manager I would tell them to install a package called for its hijack.  Once you enter into the installer for you know I already have it installed so it's telling me its already installed.   Once you have that first of all was going to become the man in the middle using the same command that we've been using in the previous videos using the middle for America.   Now you can become the man in the middle.   Any way you want to use our spoof or any other to once you're the man in the middle.  We're going to use it to capture the cookies.   Now there is a free plug-in that comes in with Matt in the middle of what I'm going to do with you just to show you how the whole process works together with another tool called hampster.   So Im gonna the Angara it and running for it is very simple.  All we have to do is just type in Ferrett and then you put your interface which is right in my case.   Again if you're using your wireless card then put the interface the name of your wireless card on it is running now and it's ready to capture cookies and its already capturing cookies.   Now all we want to do.  We're also going to start a graphical interface a web Gyi that will allow us to navigate to inject the cookies and navigate into our systems session. 

  So to do that was going to use a tool called hamster and Ryan hamster is even simpler than for.  So all you have to do is just run hamster and were ready to go.   So I'm just going to go over what's happening right now.   So on the top right here were becoming the demand in the middle so we're doing ARPU poisoning on the right here.   Were capturing the cookies using a tool called farit and all we did is the ferret interface name.   So very simple Come on.   And on the last year, we started a Web site which will allow us to see the cookies and inject them into our browser.  And we did that using type in hamster which is the name of the program.   So everything is ready.    Now I'm going to go into my target and log into my account so I'm just going to go.    For example, I'm just going 

to pretend that I'm raising the internet so I'm going to go to big dot com   and then Im going to look for Dailymotion   just go onto 

the Web website and as you can see again and be authenticated automatically without having to enter anything as username or password.   Now let's come here and as you can see how we managed to capture the cookies here on the right and I'm gonna copy this link that they gave us.   That's very good of us.   And I'm going to go to my browser now.   I need to modify my proxy settings to use Hamster.   So were going to go to the settings here.   Were going to go on the preferences advanced network settings and were going to set it to use a manual configuration and were going to put the port to one two three four so we're using 1 2 7 0 0 0 1 which is our local address and the port is 1 2 3 4 Click OK and then were going to navigate to you are given to us by far So as 1 2 7 0 0 0 1 1 2 3 4 we go in there.   Now I have already selected my doctor.   But in your case, you're going to need to go into adapters and enter Etihad zero-click Submit query and we can see that here we have two targets and my target is this one.   That's my target IP.   So I'm going to click on it and you can see here on the left we have all the or else which contains cookies related to our target.  So obviously these are ads websites or ads you or else and you can see here we have a URL for Dailymotion   does come.  I'm going to open the ad and your top and as you can see I'm actually logged in as Zayde without having to enter my username and password so I can go on my channel and do anything that the target person is able to do without using the username and the password.  And this is all possible because we sell the cookies that the person actually uses to authenticate themselves.   With the website.   So were actually logging in exactly the same way that the target person logs in to their account. ]

 Size: 568.83M