Teaser – Converting Downloads To Trojans On The Fly & Hacking Windows 10

Gaining Access Overview

Discovering Names of Hidden Networks

Connecting To Hidden Networks

Bypassing Mac Filtering (Blacklists & Whitelists)

Cracking SKA WEP Networks

Securing systems from the above attacks

Sniffing Captive Portal Logins Information In Monitor Mode

Sniffing Captive Portal Logins Information using ARP Spoofing

Creating a Fake Captive Portal- Introduction

Creating a Login Page- Cloning a Login Page

Creating a Login Page- Fixing Relative Links

Creating A Login Page- Adding Form Tag

Creating A Login Page- Adding Submit Buttton

Preparing Computer To Run Fake Captive Portal

Starting the Fake Captive Portal

Redirecting Requests To Captive Portal Login Page

Generating Fake SSL Certificate

Enabling SSL/HTTPS On Webserver

Sniffing & Analysing Login Credentials

Exploiting WPS – Introduction

Bypassing “Failed to associate” Issue

Bypassing 0x3 and 0x4 Errors

WPS Lock – What Is It & How To Bypass It

Unlocking WPS

Advanced Wordlist Attacks – Introduction

Saving Aircrack-ng Cracking Progress

Using Huge Wordlists With Aircrack-ng Without Wasting Storage

Saving Cracking Progress When Using Huge Wordlists Without Wasting Storage

Cracking WPA/WPA2 Much Faster Using GPU – Part 1

Cracking WPA/WPA2 Much Faster Using GPU – Part 2

What is it and How it works

Installing Needed Software

Stealing WPA/WPA2 Key Using Evil Twin Attack Without Guessing

Debugging & Fixing Login Interface

What is WPA/WPA2 Enterprise & How it Works

How To Hack WPA/WPA2 Enterprise

Stealing Login Credentials

Cracking Login Credentials

Securing Systems From The Above Gaining Access Attacks

Post Connection Attacks Overview

Ettercap- Basic Overview

Ettercap – ARP Spoofing & Sniffing Sensitive Data Such As Usernames & Passwords

Setting Up SSLstrip Manually To Bypass HTTPS & Sniff Data From HTTPS Websites

Automatically ARP Poisoning New Clients

DNS Spoofing Using Ettercap

Bypassing Router-Side Security & Poisoning Target Without Triggering Alarms

MITMproxy – What is It & How To Install It

Using MITMproxy In Explicit Mode

Analysing (Filtering & Highlighting) Flows

Intercepting Network Flows

Modifying Responses & Injecting Javascript Manually

Intercepting & Modifying Responses In Transparent Mode

Editing Responses & Injecting BeEF’s Code On The Fly

Editing Responses Automatically Based On Regex

[Bonus] – Stealing Login Info Using Fake Login Prompt

[Bonus] – Hacking Windows 10 Using A Fake Update

What Do Mean By MITM Scripts?

Capturing & Printing Requests/Responses

Filtering Flows & Extracting Useful Data

Using Conditions To Execute Code On Useful Flows

Generating Custom HTTP Responses

Testing Script Locally

Generating Trojan- Installing The Trojan Family

Generating Trojan- Converting Any File (eg:image) To a Trojan

Testing Script On Remote Computer To Replace Downloads With a Generic Trojan

Executing Bash Commands & Calling Trojan Factory From Our Script

Using Variables & More Complex Conditions

Converting Downloads To Trojans On The Fly

Configuring The Trojan Factory’s MITMproxy Script

Using The Trojan Factory MITMproxy Script

Bypassing HTTPS With MITMproxy

Replacing Downloads From HTTPS

Injecting Data (Javascript, HTML elements …etc) In HTTPS Websites

Securing Systems From The Above Post Connection Attacks