Explore the dark side of cybersecurity with our compelling PowerPoint presentation! Delve into the world of attack vectors, from brute-forcing Tomcat server login pages to Wi-Fi deauthentication attacks. Gain insights into the techniques used by cybercriminals to exploit vulnerabilities and compromise systems. Whether you're a security professional or a curious enthusiast, this presentation sheds light on the threats lurking in the digital landscape. Join us as we uncover the tactics, tools, and countermeasures essential for defending against cyber threats. Don't miss out on this eye-opening journey into the realm of cyber warfare!

1. Breakdown on Breaking In

2. Meet & Greet
Meet Alice
He is our attacker
Meet Victor
He is our victim
I am evil I am an
ignorant web
user

3. BEEF Attack
• User's browser is hooked by sending a malicious
link
• Browser Exploitation
Framework(BEEF)
• Attacker then has complete access to the user's
system
• Attacker can also escalate the attack from here

4. BEEF Attack
This deal
looks
tempting
Complete Access
1
2
3
4
5

5. Steps
• sudo apt-get install beef-xss
• Type beef-xss to run the program
• Login with the password just set by you
• Create a malicious web page with the hook URL
• Enter a password for the default user "beef"
• Beef UI will open automatically in your browser
• Send it to the user
• Boom! Browser Hooked

6. Wifi Deauth Attack
• Deauth means to disconnect
• Spoof victim MAC address and send deauth
packets to the router
• To disconnect deauth packet is sent

7. Wifi Deauth Attack
Scene 1
Coffee Shop

8. Wifi Deauth Attack
I am Victor & I
want to disconnect
Scene 2
Coffee Shop

9. Steps
• Kill all the processes running on the
wireless network interface(NIC)
• Put the Wireless NIC in monitor mode
• Start listening in monitor mode
• Start listening on the target network
specifically
• Identify the victim MAC address
• Deauth

10. Bruteforce Attack
• Test Server:Tomcat Server
• Found is Metasploitable Linux
• Intentionally vulnerable
• Bruteforcing from a wordlist
• Wordlist:File containing all the possible
combinations

11. username
password 1 3
Correct Hit:
tomcat
tomcat
Login Page
2 4

12. Steps
• Set up the Tomcat Server
• Scan Metasploitable Machine using NMAP
• Open up login page of Tomcat Server
• Open msfconsole and use the required auxiliary
• Set required options for the auxiliary
• Bruteforce
• Fire up Postgresql service

13. Malicious Android APK
• Create an APK for a third party app
• APK contains malicious code
• Initiates a reverse connection
to the attacker
• App can be beautified and customised

14. generates
sends
Reverse Connection
evil
configured
1 2
3
4
5

15. Steps
• Fire up postgresql service
• Create the malicious APK
• Send it to the victim
• Social Engineer him/her to install the app
• Create a listener for incoming connections
• Connection coming from phone to the attacker
is connected

16. Thank You
Vinita Bhandiwad Mam Neha Kudu Mam
&
Also the
audience