ChaiPuter

I will try to explain the two main methods of getting the victim's access to sites he visits (even those protected by HTTPS). The methods I will talk about are based on MITM (Man in the middle) attack. Both methods require you to connect to the victim's wifi beforehand (prerequisite). 1. Listen to all traffic from the devices on your network to the router. 2. Cheat the router and the victim to pass all of their traffic through you (as a proxy , thus gaining access to all traffic). Listen The first method (listening mode) is more non-detectable as you don't actually disturb the victim or the router, you just listen to the packets of traffic as they go through the air. This method can be done using two main modes: I. Promiscuous mode - Which is a mode you can use even on windows OS, and can be enabled on many network devices. This mode is not recommended ever using as it has lots of limitations, the most prominent one is that it can listen to traffic only on non-e...

A year ago I wrote about my first stab at MITM attacks . In this post I want to focus on MITM attacks using windows only tools. What is MITM Attack? A M an I n T he M iddle attack is an attack where the attacker is connected to the same network as the victim while positioning himself between the victim and the router thus makes himself a sort of a proxy while grabbing all of the network packets on the fly with the possibility of dumping them or even altering them. So instead of: Victim -> Router It is altered to: Victim -> Attacker -> Router How does the MITM work ? Without delving deeply to technicalities, the attacker will need three main tools: A. Spoofing tool - this one will make the attacker spoof the network to make the victim believe the attacker is the router thus sending all of its packets to the attacker instead of to the router, then the attacker will forward those packets to the router. B. Dumping tool - A tool to capture all of those packets going...

In this article I will show you how simple it is to uncover passwords which are sent over your wifi network. In a nutshell When you connect to a network, you are sending all of your data as packets to the router which in turn sends it on to your ISP and from there to the WWW, so if you are connected to a network in which others are connected to, there are very simple ways to see all of the data they are sending to the router (as you yourself are also connected to it). This technique is called Man in the middle attack or in short MITM, it is using APR messages spoofing and other uninteresting tech methods behind the scenes to uncover all traffic going through the same network. I will show you how to do it using the Windows operating system, with an application having a good-enough gui (cain & abel). Most hacking tools are created for the linux OS and the windows hacking tools are mediocre at best, that being said, Cain & Abel is an exception as it is a very p...