Narrator: Now, before doing anything, 2 2
I wanna show you the network settings of my Kali machine 3 3
So, I'm going to select it here. 4 4
I'm going to go to settings, network, 5 5
and as you can see, it's set to use a NAT Network. 6 6
So now, if I go to my Kali machine and do ifconfig, 7 7
we'll see we have an interface called E.T.H. zero. 8 8
This interface is a virtual interface 9 9
created by VirtualBox because we set 10 10
this machine to use a NAT Network. 11 11
You can also see that this interface has an IP address, 12 12
which means that is properly connected to this NAT Network, 13 13
and it will provide the Kali machine with internet access 14 14
as long as my host machine right here has internet access. 15 15
So now, on my Kali, if I go, and let's say 16 16
if I just go to Bing.com on my browser 17 17
you'll see that I can successfully go to the website 18 18
because Kali is connected to the internet 19 19
through this virtual interface that is called E.T.H. zero. 20 20
Now, if we go back to our diagram 21 21
that shows what we need to create an access point, 22 22
you can see that we need an interface 23 23
that is connected to the internet. 24 24
We don't care what type of interface this is, 25 25
as long as this interface has internet access. 26 26
So, in our example, we're gonna be using E.T.H. zero 27 27
to provide our fake access point with internet access. 28 28
The other interface that we need, 29 29
we said that this needs to be a wireless adapter 30 30
that is able to act as an access point. 31 31
Again, if I go back to the result 32 32
of my ifconfig, you can see I already have 33 33
a wireless adapter connected 34 34
to this computer; it's called lan zero. 35 35
Keep in mind that this is in Managed Mode. 36 36
It's not in Motor Mode, and it is not connected to anything. 37 37
So you can see it does not have an IP address. 38 38
This is very, very important. 39 39
It needs to be, first of all, in Managed Mode 40 40
and, second, not connected to any network. 41 41
So, even if we go at the Network Manager in here, 42 42
you can see we have Wired Connected. 43 43
This is my E.T.H. zero and Wi-Fi Not Connected. 44 44
Once we have everything configured properly, 45 45
you're ready to use Mana and, before we started, 46 46
we should modify its settings. 47 47
Mana's settings are stored in a text file. 48 48
So, to edit the settings, we're going to open this file 49 49
and edit it using Leafpad which is just a text editor. 50 50
So, I'm going to type Leafpad, 51 51
followed by the location of the file that we want to modify, 52 52
and the Settings File for Mana 53 53
is stored in E.T.C. 54 54
Mana Toolkit 55 55
Host A.P.D. 56 56
Mana dot conf. 57 57
So, all we're doing with this command is 58 58
we're using a text editor called Leafpad 59 59
to open a file that is stored in this path. 60 60
So when we hit Enter, you'll see 61 61
we have the text editor here opening the file for us, 62 62
and all of these are the settings 63 63
that you can modify for Mana. 64 64
You can actually get a full list and a full description 65 65
of all the settings that you can modify in this link 66 66
but we don't need this for now. 67 67
The main thing that you need to modify is the interface. 68 68
This is the interface that you want 69 69
to use to broadcast the signal. 70 70
So, basically, it is this component, and in my example 71 71
this is going to be lan zero; this is my wireless interface. 72 72
So I'm keeping this the same. 73 73
The next thing that you might want to modify 74 74
is the S.S.I.D.; this is the network name that will appear 75 75
when people look for Wi-Fi networks. 76 76
I'm going to keep this as internet 77 77
so when people look for networks, 78 78
they will see my fake access point under this name. 79 79
So I have nothing to say right now 80 80
but, if you modified anything, make sure you save the file 81 81
from File Save, and then close it, 82 82
and the next file that we'll need to modify 83 83
is the Start Script; this is the file 84 84
that will actually start Mana Toolkit for us. 85 85
Again, we're going to use Leafpad to open and edit 86 86
this file; so we're going to type Leafpad, 87 87
followed by the location of Mana's Start Script which is 88 88
in user share Mana Toolkit 89 89
run Mana start 90 90
NAT simple 91 91
dot S.H. 92 92
Now, in this file, there are two main things 93 93
that you need to modify; the first one 94 94
is the Upstream Interface; this is the interface 95 95
that has internet access so this is 96 96
this component right here and, as we've seen before, 97 97
this is E.T.H. zero in my case. 98 98
So I'm gonna leave this the same. 99 99
The next one, the P.H.Y., is again the interface 100 100
that is gonna broadcast the signal. 101 101
So, in my example, this is my wireless adapter, 102 102
and it is called lan zero- not lan one. 103 103
So I'm actually gonna modify this to lan zero 104 104
then I'm gonna save it Control 'S' 105 105
and quit it Control 'Q', 106 106
and that's it; we're ready to start the fake access point, 107 107
and like we said before, we're going 108 108
to be starting it using this script right here, 109 109
this start NAT simple; that's why we modified it. 110 110
So all we have to do is I'm gonna copy this 111 111
because that's its location. 112 112
So, in order to start it because this ends 113 113
with a dot S.H., we're gonna do bash 114 114
followed by the location of the script. 115 115
So what we wanted to modify using a text editor 116 116
we used the program called Leafpad 117 117
followed by the path of the file. 118 118
Right now, we don't want to modify it. 119 119
We want to execute the code inside it. 120 120
The code inside it is a Bash Script Code. 121 121
That's why we're saying I want to run this file using bash. 122 122
Now, I'm gonna hit Enter, 123 123
and, as you can see, it's telling me that the access point 124 124
is enabled, and I can press Enter 125 125
to kill the access point so to exit it. 126 126
Now, sometimes the first time that you run this script, 127 127
it will not work; it will actually give you an error. 128 128
So it's a good idea to actually just run the code again, 129 129
literally the same command, if it fills, if it complains 130 130
about the specific error, just run the command again, 131 131
and it might work, if it didn't work for the second time, 132 132
then ask me in the 'Q' and 'A' section, 133 133
and we will respond to you and help you fix this issue. 134 134
So now, let's go and try to connect to this network 135 135
and see if it actually works. 136 136
So right here, I have a windows machine. 137 137
It's another virtual machine, but 138 138
I have another wireless adapter connected to this machine. 139 139
Do not test this from your host machine 140 140
because the fake access point is getting its internet access 141 141
from the host machine through the NAT Network. 142 142
So, if you test this network from the host machine, 143 143
the network will not work. 144 144
So, either test it from another virtual machine 145 145
with another wireless adapter 146 146
or, if you don't have another wireless adapter, 147 147
then you can test it from your phone 148 148
or from another laptop or any other computer within range, 149 149
but do not ever test it from the host machine. 150 150
So right here, I'm going to search 151 151
for networks to connect to, 152 152
and, as you can see I have a network called Internet. 153 153
It does not use a password 154 154
so I'm just gonna connect to it. 155 155
As you can see, I'm connected now, 156 156
and I'm gonna open Firefox just to check if 157 157
I have internet connection so I'm going to go to Bing.com, 158 158
and, as you can see, Bing.com's loading. 159 159
So now, I actually have internet access. 160 160
So now, anything I do on this computer 161 161
will have to be sent to the access point. 162 162
If I want to access any websites, 163 163
if I enter any passwords and usernames, 164 164
everything is going to go to the access point, 165 165
and the access point is the hacker machine 166 166
so the hacker machine is already the man in the middle. 167 167
So now, you're at the same position 168 168
that you would be after running an A.R.P. spoofing attack. 169 169
So you can go ahead and use Wireshark 170 170
to sniff packets and analyze them, 171 171
or you can go and use man in the middle left 172 172
exactly as I showed you before. 173 173
The only thing that you need to keep in mind 174 174
when using Wireshark or man in the middle left 175 175
or any other tool unique to set the interface 176 176
to the interface that is broadcast in the signal. 177 177
So this is the interface that you set in the P.H.Y. option, 178 178
not in the Upstream; so in my case right now 179 179
this would be lan zero, not E.T.H. zero. 180 180
Also, if you're going to use man in the middle left, 181 181
theoretically you wouldn't need to use the 182 182
dash dash A.R.P. dash dash spoof argument, 183 183
but I noticed that the tool will not work 184 184
unless you add that argument so you can add it in, 185 185
and you'll see that it'll work exactly as shown before.