0:14 in today's session we'll be taking a look at how to perform a social engineering attack using the social engineering toolkit in KH Linux before even going into that demo this is the disclaimer the video is strictly for educational purposes only and the social engine ing attack was performed in a controlled Virtual Lab environment the presenter is not responsible for any misuse of the information presented in this video and the presenter does not support any malicious hacking activities fishing is illegal and is punishable according to the Cyber loss do not try this on others never attempt sending fake emails or messages to others so in the last class we were looking at Social Engineering we looked at the definition of social engineering
1:00 we understood the various different types of social engineering attacks if you're not clear with social engineering attacks please visit my lecture on social engineering so that you can understand the demo that I'm going to show you now so we looked at so many different types right biting scareware pretexting fishing spear fishing email hacking contact spamming tailgating and so on so I was talking to you about fishing what is uh fishing fishing comes under this category sending an email or a text message with a malicious link to the user and then when the user clicks on the link he'll be taken to a fake website wherein you'll be asked to enter his credentials and when he enters his credentials the hacker will get hold of
1:47 the information provided by the victim so that is fishing I have given you a very good example for sphar fishing here so in this mail say this mail has been sent by the hacker with a link and uh the user will somehow be made to trust this email and when the user clicks this link you'll be taken to a website or on an application that is fake and when he enters the credentials and the data the hacker will get hold of the data so we going to see how such an attack can be staged using K Linux and the social engineering toolkit in K Linux so for this let me straight away go to this demo I'll be using two machines here for this demo so you can see I have
2:35 two virtual machines running on my Oracle virtual box this is my Ubuntu which will be used by the victim and I have the KH Linux here which will be used by our hacker for performing this attack let's straight away go to this demo let's see how this one works let's say that [Music] um the victim has somehow received this link from the hacker through a mail or uh he gets this link through a message let's assume that and uh it says log to Google here and it press this link and it clicks on this so now you'll be diverted to a page wherein you'll be asked to sign in to Google Now the victim is going to enter his email and uh password let's
3:22 assume the email ID Satish gmail.com and the password is oh my God so this victim then clicks on sign in and when when he clicks on sign in there is uh something that's going on here see he's not really getting signed in is getting diverted to the Google uh homepage and he doesn't know what's happening maybe he searches for something else and uh is getting diverted so it's it's working normally maybe he thinks there was some internet issue and uh is signning didn't work but Behind These scenes you can see the hacker was listening to him and uh when you go take a look at this you'll be
4:09 really surprised Satish gmail.com the email ID and password is oh my God the hacker has some caught the credentials of this user so this is a fishing attack and uh you see how easily this hacker was able to get the data from his victim so let's go and try that again say if the victim enters say there is some other victim now and he's going to enter some uh password and things like that so the hacker again sends this link to some other person out there so we have another victim here and this is the hacker listening to this victim say when this victim gets this he will log in to Google he clicks on the link say he trust the link and then he gets the page
4:56 for Google and he signs and said let's say now Ramesh is signing in another victim Ramesh gmail.com and the password is I am so Dum and he clicks on sign in Pam that's it it's done you see here the email ID of the user is rames at Gmail and the password he has entered is I am so dumb so the hacker got hold of it he can log in and perform whatever he wants so that that's why it's very dangerous to click on links you see how easily an hacker can get hold of your credentials so this is what is a social engineering attack and we have a social engineering toolkit inside Kinex that
5:43 will help us perform this I'm going to show you a demo on how to perform this this is for educational purposes and we not going to attempt this or perform this on anyone else even let it be our own friends we should not try this so let me tell you how to perform this so I'm going to demonstrate how this hacker was able to Stage this attack using the social engineering toolkit in K Linux for that we need to go to terminal and search for social engineering SE toolkit search for this
6:32 toolkit and this toolkit helps us to perform a various kinds of attacks we will select one social engineering attacks that is our objective and again inside social engineering attacks lot of options are there we will select website attack vectors and inside website attack vectors again we have several options in this we'll select credential Harvester attack method so the name itself suggests what is credential username and password it's an credential Harvester attack method sounds so funny so now let's select three we we'll select credential Harvester attack method and then press enter we have many options here we'll
7:18 use web templates for our attack let's select one and now it asks us for the IP address say we have to provide the IP address of our KH Linux so we are listening using K Linux right so this is the IP address of K Linux you can say Let Me Tell You IP address of my KH Linux machine is 10.0.2 do15 so that's what I'm going to enter here 10.0.2 do15 this is your listener that machine that is going to listen for all the data that the user enters and now we have to select which website template we wanted we'll we'll use Google know that's what we are
8:04 asking the user to sign in right so this website will be cloned so cloning of website has uh taken place HTTP ww.google.com now K Linux is actually waiting so it's in the listening mode Let's see what happens how this victim you know enters this information and how it gets transmitted to kinx now uh when you talk about this uh link that is test. HTML file which the victim was using let me open that Nano test.html so this is the HTML file say our hacker some of send this link like this so
8:49 inside the link he has given the IP of The Listener so this is the IP of my K Linux machine HTTP and then the listener log to Google here so he is just hiding this by a message on the hyperlink so that is test.html so when this user uh users test. HTML let's go to test.html here yeah so when the user just opens test.html or when he gets the link this is how it is and when it clicks on this link it is actually getting diverted to 10.0 . 2.15 that is nothing but the listener and this site whatever page you
9:35 are seeing here has been cloned from the actual Google website so ww.google.com has been cloned so this is where the user loses you know that is the victim believes that it is from Google because it's exactly the same and the hacker was able to clone it in just a second and send it to our victim now when the victim enters the password say Chris is the username Chris gmail.com and then he enters some I am so foolish that is the password and when he clicks on sign in that's it it's done the hacker you see immediately this the
10:21 information is getting transmitted to her hacker Chris gmail.com and password is I am so foolish so this kind of an attempt can happen any number of times and for any number of users he can send this link and whenever people start using this link and then they when when they even click on that you see is getting an alert and say Satish again at gmail let me enter my name Satish again gmail.com I will not trust this something that something like that is the password and when the user clicks sign in that's it sa again at gmail.com
11:06 I not TR this so this kind of an attack is called credential Harvester see we are harvesting all the credentials of the victim I'm not sure why we even have this social engineering toolkit in Kal next it's so deadly within seconds we can clone any website send that website through a link to an user maybe through email or messages and if the user truster website is done so that's why uh I told you you know when we are talking about social engineering attacks the very important thing is you should never trust any such links and you should never click on the link what is the best option here even if this victim gets uh a Google link here you should not click this what you
11:53 should perform is you should go to google.com and then you should sign in maybe takes 2 or 3 minutes but that is the best option we have so in this case we can avoid fishing attacks okay so that's a small demo on social engineering attack and how to carry it out using a social engineering toolkit in khin X you see there are lot of other kinds of attacks that can be staged by the hacker using this social engineering toolkit as and when uh we have time we'll explore the remaining attacks I hope you all have understood this but since you understood do not try this on people or on or even on your friends as you know fishing is illegal and is
12:39 punishable according to the Cyber laws in India thank you
