Waraxe IT Security Portal

VERTIGO · Advanced user

In order to follow this attack you will need a copy of Backtrack 4 final and it will need to be fully updated.

This can be done with apt-get update && apt-get upgrade in a terminal.

Once you are up to date, change directories in to the /pentest/exploits/SET directory:

The attack we are using is the Web Site Java Applet which is choice #2:

What we want to do is clone a existing website which is choice #2:

We need to enter the URL of the website we want to clone:

(In this case I am using xkcd.com which is a popular web comic)

Next we need to choose a payload:

I will be using the meterpreter payload.

The next choice to make is the encoding:

(This is used to bypass pesky anti virus)

We can also select the number of times we want to encode the payload:

(I used 4 for the sake of the tutorial but its probably overkill)

Since we selected a payload which requires a reverse connection we need to enter a port for the listener:

Now just hit enter and let SET create the evil website:

If every thing went correctly you should be looking at a screen similar to this:

Now we need to get our target to visit our evil website:

(Its up to you how to do this, for simplicity we are just going to send a email)

Our unsuspecting target checks his mail:

And opens the link in his browser:

Notice that at this point we are still at the local IP of our evil web server and there is a digital signature error. This error is the only indication that this attack is taking place.

Once our target accepts the warning message, our payload executes on our attacking machine:

One of the coolest parts about this attack is that as soon as the target clicks on any of the links on the page, they are taken to the real page on the web and never know what happened:

GAME OVER