Network Hacking: Post Connection Attacks

Question 1

How to change the MAC address on network interface

Answer 1

In the terminal:

1. ifconfig wlan0 down
2. ifconfig wlan0 hw ether 00:11:22:33:44:55
3. ifconfig wlan0 up
4. ifconfig

Question 2

How to change wireless adapter to monitor mode

Answer 2

1. ifconfig wlan0 down
2. airmon-ng check kill
3. iwconfig wlan0 mode monitor
4. ifconfig wlan0 up
5. iwconfig

Question 3

How to discover devices connected to a network using netdiscover

Answer 3

netdiscover -r 10.0.2.1/24

r = range, which is the starting ip address and the subnet mask

Question 4

How to discover devices connected to a network using nmap

Answer 4

nmap -sP

Question 5

When discovering devices on a network, what information should we look for?

Answer 5

1. IP
2. MAC
3. OPEN PORTS
4. OS

Question 6

How to ssh into a device

Answer 6

ssh root@192.168.83.100

Question 7

How to check an arp table?

Answer 7

arp -a

Question 8

What makes ARP insecure?

Answer 8

1. Clients accept responses even if they did not send a request
2. Clients trust responses without any form of verification.

This makes it vulnerable to arp spoofing

Question 9

What is Man in the Middle Attack?

Answer 9

An attack that uses arp spoofing or poisoning to make the router think that you are at the victims ip, and the victim think that you are at the router mac address. This places you in-between the two devices allowing you to intercept the traffic

Question 10

Using arpspoof to poison the arp tables

Answer 10

1. Tell the target you are the router
   arpspoof -i eth0 -t 192.168.83.129 192.168.83.2
2. Tell the router you are the target
   arpspoof -i eth0 -t 192.168.83.129 192.168.83.2
3. Set up port forwarding
   echo 1 > /proc/sys/net/ipv4/ip_forward

Question 11

HSTS

Answer 11

HTTP Strict Transport Security (HSTS) is a simple and widely supported standard to protect visitors by ensuring that their browsers always connect to a website over HTTPS. HSTS exists to remove the need for the common, insecure practice of redirecting users from http:// to https:// URLs.

Question 12

How to deal with HTTPS

Answer 12

Downgrade HTTPS to HTTP before the data is sent.

Question 13

How to deal with HTTP HSTS

Answer 13

Change the website domain name.

Question 14

What is DNS spoofing

Answer 14

A way of controlling DNS requests on a network, by providing the ip for a fake website when a DNS request is made.

Question 15

How to start a webserver on linux Kali

Answer 15

sudo service apache2 start

Question 16

How to setup a fake website on Kali linux

Answer 16

1. Go to the var / www / html folder
2. Add desired webpages
3. start server with: sudo service apache2 start
4. Go to Linux machine Ip in web browser