TuTVideo: Easy Web Password Collector with WebJack 08-04-2011, 11:50 AM
#1
Lately i created some Video, which shows the Web Jack Attack:
The web jacking attack method will create a website clone and present the victim with a link stating that the website has moved. This is a new feature to version 0.7. When you hover over the link, the URL will be presented with the real URL, not the attackers machine. So for example if your cloning gmail.com, the url when hovered over it would be gmail.com. When the user clicks the moved link, gmail opens and then is quickly replaced with your malicious webserver.
Works perfect when your machine Acts as a Fake Accesspoint.
Here we go:
http://www.youtube.com/watch?v=5zyiSoQ6b3U
The web jacking attack method will create a website clone and present the victim with a link stating that the website has moved. This is a new feature to version 0.7. When you hover over the link, the URL will be presented with the real URL, not the attackers machine. So for example if your cloning gmail.com, the url when hovered over it would be gmail.com. When the user clicks the moved link, gmail opens and then is quickly replaced with your malicious webserver.
Works perfect when your machine Acts as a Fake Accesspoint.
Here we go:
http://www.youtube.com/watch?v=5zyiSoQ6b3U


![[+]](https://sinister.li/images/modern/collapse_collapsed.png)