Admin: /* Flags */

2016-08-27T07:41:41Z

Flags

← Older revision		Revision as of 07:41, 27 August 2016
Line 54:		Line 54:

	{{MITMFlag}}		{{MITMFlag}}

			{{MITMLabsFlag}}

Admin: Created page with "=Procedure= ==Hardware== Conducting an attack with Kali Linux running on a laptop. The target is a sheep running an iPhone 5. ==Connect to Wireless with iPhone== Obtain I..."

2016-08-27T07:41:18Z

Created page with "=Procedure= ==Hardware== Conducting an attack with Kali Linux running on a laptop. The target is a sheep running an iPhone 5. ==Connect to Wireless with iPhone== Obtain I..."

New page

=Procedure=

==Hardware==

Conducting an attack with Kali Linux running on a laptop.

The target is a sheep running an iPhone 5.

==Connect to Wireless with iPhone==

Obtain IP address on local network. Next step is to attack.

==Surveillance==

Start by doing recon. Scan the network with nmap to find the phone's IP:

<pre>
$ nmap -F 192.168.0.*
</pre>

<code>-F</code> is for fast scan, which only scans the lowest 100 ports.

This reveals a scan report for the iPhone at 192.168.0.14.

Now we have our target for the MITM.

Do an aggressive nmap scan so you know what services are running on the sheep:

<pre>
$ nmap -A 192.168.0.14
</pre>

No open ports, no running services, and not enough information to produce a specific operating system fingerprint. Well, at least we tried.

==MITM with Bettercap==

On the Kali machine, run a MITM attack with [[Bettercap]]:

<pre>
$ bettercap -I wlan1 -O betercap_androidmitm.log -S ARP -X --gateway 192.168.0.1 --target 192.168.0.14
</pre>

then run [[Wireshark]] on the attacker machine to verify the traffic is flowing your direction.

=Results=

The iPhone is totally resistant to a MITM attack.

HTTP pages would NOT load on the phone. Apps that required an insecure network connection (e.g., news app) reported a network error. No HTTP traffic could be sniffed.

HTTPS services like Google search, large bank website, and map app worked fine and were not vulnerable to the MITM attack. They made it past the attacker unsniffed and uninterrupted.

=Flags=

{{MITMFlag}}

MITM Labs/Bettercap iPhone - Revision history

Admin: /* Flags */

Admin: Created page with "=Procedure= ==Hardware== Conducting an attack with Kali Linux running on a laptop. The target is a sheep running an iPhone 5. ==Connect to Wireless with iPhone== Obtain I..."