Can you help me to solve these assignmentImport the VM provided in the file HackingLab.ova into your...

Question

Can you help me to solve these assignment

Import the VM provided in the file HackingLab.ova into your local Virtual Box lab (select the option “Include all network adapter MAC addresses” when importing). Make sure your own Kali Linux VM can communicate with all the other VM in the lab by means of the internal network (try nmap -sn 192.168.0.0/24, because inbound pings are filtered out by default in Windows). Then, answer the questions below, giving an explanation of how or why even if not explicitly asked. Reference tutorial: https://www.hackers-arise.com/post/2017/08/28/mitm-attack-with-ettercap Part A: Checking the environment 1. Capture a screenshot of the nmap command showing all 3 machines in the network. 1. Open a browser in the Debian client and access the URL http://baloon/herzing. Capture a screenshot. 1. Try with http://baloon/herzing/private. What kind of authentication was set in IIS? Check it out in the IIS Manager in the Windows server. Part B: Preparing an ARP poising attack 1. Open the graphical interface for ettercap, available by default in Kali under the Sniffing & Spoofing category. Make sure you select the internal network interface that has connectivity with the other machines in the lab. Then, click on the “Accept” button on the top right. Copy & paste here all messages in the bottom frame. 1. Click on the “Host List” button on the top left corner. If the list is empty, click on the “Scan for hosts” button. Once you get them, capture a screenshot. 1. Execute a ping from the Windows server to the Debian client. Then, check the ARP table in both. What command did you use? The MAC addresses are different. However, the first 6 octets are equal. Why? 1. Back in ettercap, right click on 192.168.0.31 (the server) and set it as Target1; then, 192.168.0.101 (the client) as Target2. Finally, click on the “MITM menu” button on the top right corner and select “ARP poisoning”. Capture a screenshot including the bottom frame. 1. Check again the ARP tables and explain in your own words what is happening. Support your explanation with screenshots if necessary. Part C: Performing the MITM attack 1. Now, all communication will pass through Kali. To demonstrate it, browse to http://baloon/herzing/private from the Debian client. Use any credentials, such as “abc” for username and password. Then, check the messages frame in ettercap. Capture a screenshot. 1. When done, always click on the “Stop MITM” button. How can you protect against MITM attacks? How could you try this protection in the present lab? 1. Using filters, you can interfere with the communication. As root, move to the folder /usr/share/ettercap in Kali. Copy the file etter.filter to myfilter.txt and, then, modify it so that “Herzing” is substituted by your first name. Also, the message to be logged is “Hacked”. Show the content of the new file. 1. The filter needs to be compiled to a new file, for instance myfilter.comp. What command would you use? 1. Repeat the attack but loading the filter you created and, then, browsing to http://baloon/herzing. Capture a screenshot of the message frame. 1. Execute the command “wget http://baloon/herzing/index.html” as well (you might need to press Ctrl+C to return to the shell prompt). What is the content of the file? Part D: Reasoning 1. Explain why this attack would not be effective if you are in a different network segment than the victim. 1. Your co-worker advised the IT Manager to use encryption to prevent ARP poisoning attacks. What is your opinion? Through this experiment, we will create a Facebook phishing page using Social-Engineer Toolkit (setoolkit) which is a preinstalled functionality in Kali Linux. The phishing link can be sent to any user on the same Local Area Network as you and the data that they enter on the fraudulent page will be stored in a file on the attacker’s machine. Social Engineering Toolkit or SET for short is the standard for social engineering testing among security professionals and even beginners must have a basic idea about using the tool. Basically, it implements a computer-based social engineering attack. You can find out reference material in the links below: https://www.tutorialspoint.com/kali_linux/kali_linux_social_engineering.htm https://linuxhint.com/kali-linux-set/ https://medium.com/@nancyjohn_95536/using-set-tool-kit-to-perform-website-cloning-in-kali-linux-67fa01c92af9 1. As root, open “setoolkit” from the command line. After reading and agreeing with the terms of service, you get to the main menu. Navigate through the menus to familiarize yourself. What path leads to the credential harvester? 1. Once there, choose the option “Site cloner” to craft a malicious web page. SET will ask you to provide an IP where the credentials captured will be stored. Enter the internal network IP address of your Kali Linux VM. Capture a screenshot. 1. We need to clone the login page of LinkedIn, hence enter the complete URL, including the protocol. Capture a screenshot. 1. The setup for a phishing attack is complete, you have cloned LinkedIn and hosted it on Kali. Now, go to browser and type https://yourIP and you are able to open the fake LinkedIn page. Capture a screenshot. 1. Enter a random username and password and click on login. What happens next? Why users might not be suspicious? 1. In background, your settoolkit is catching up your credentials. Capture a screenshot of SET in the terminal showing the provided credentials. 1. Find out the permanent location where you can check them, that have been recorded in XML file. What is the directory? Capture a screenshot of the part of the file referring to “password”. 1. Go back to the main menu. Find the right options to send an E-mail to a single address. Then, send an email to your Herzing account from a Gmail account (create a new one if necessary). Capture a screenshot showing all options you chose before writing “END” to finish your message. 1. The message might or might not get to your Herzing account inbox, depending on Herzing’s and Google’s policies and your choices. Nevertheless, if successful, what kind of phishing attack were you trying? Justify your answer. 1. What would you need if you wanted to spoof the sender instead of using a Gmail account?

arpcachepoisonningandmaninthemiddleattack-dlkat5tm.docx phishingattack-k4spmell.docx

Naveen Kumar · Accepted Answer

PARAM: {"pageKey":"d_homepage-guest-home_jsbeacon","metricsType":"pageLoadTime","metricsValue":264}                                                        
[*] WHEN YOU'RE FINISHED, HIT CONTROL-C TO GENERATE A REPORT.
192.168.253.136 - - [29/Sep/2022 04:49:52] "POST /homepage-guest/api/ingraphs/gauge HTTP/1.1" 302 -
[*] WE GOT A HIT! Printing the output:
POSSIBLE USERNAME FIELD FOUND: [{"eventBody":{"pageType":"full","totalTime":0,"trackingInfo":{"clientTimestamp":1664441392773,"pageTag":"basic"},"header":{"pageInstance":{"pageUrn":"urn:li:page:d_homepage-guest-home_jsbeacon","trackingId":"3zWQoClLT/izauMfZ+Sb/g=="},"time":1664441392776,"version":"2.1.260","applicationViewerUrn":"urn:li:guest:c658f03e-5995-4f39-8300-901d815a5c99","clientApplicationInstance":{"applicationUrn":"urn:li:application:(homepage-guest-frontend,homepage-guest-frontend)","version":"2.1.260","trackingId":[143,204,49,51,229,78,68,78,169,48,219,193,203,4,199,182]}},"requestHeader":{"interfaceLocale":"en_US","pageKey":"d_homepage-guest-home_jsbeacon","path":"/index2.html","referer":"http://192.168.253.136/"}},"eventInfo":{"appId":"seo","eventName":"PageViewEvent","topicName":"PageViewEvent"}},{"eventBody":{"header":{"pageInstance":{"pageUrn":"urn:li:page:d_homepage-guest-home_jsbeacon","trackingId":"3zWQoClLT/izauMfZ+Sb/g=="},"time":1664441392777,"version":"2.1.260","applicationViewerUrn":"urn:li:guest:c658f03e-5995-4f39-8300-901d815a5c99","clientApplicationInstance":{"applicationUrn":"urn:li:application:(homepage-guest-frontend,homepage-guest-frontend)","version":"2.1.260","trackingId":[143,204,49,51,229,78,68,78,169,48,219,193,203,4,199,182]}},"requestHeader":{"interfaceLocale":"en_US","pageKey":"d_homepage-guest-home_jsbeacon","path":"/index2.html","referer":"http://192.168.253.136/"}},"eventInfo":{"appId":"seo","eventName":"NavigationEvent","topicName":"NavigationEvent"}},{"eventBody":{"scope":{"scopeType":"APPLICATION_INSTANCE","scopeKey":"AAXpzKxBQBzsq3zKl1nu4A=="},"metrics":[{"name":"LargestContentfulPaint","longValue":-2,"metadata":{"basePageTreeId":"AAXpzKxBQBzsq3zKl1nu4A==","basePageKey":"d_homepage-guest-home_jsbeacon"}}],"header":{"pageInstance":{"pageUrn":"urn:li:page:d_homepage-guest-home_jsbeacon","trackingId":"3zWQoClLT/izauMfZ+Sb/g=="},"time":1664441392782,"version":"2.1.260","applicationViewerUrn":"urn:li:guest:c658f03e-5995-4f39-8300-901d815a5c99","clientApplicationInstance":{"applicationUrn":"urn:li:application:(homepage-guest-frontend,homepage-guest-frontend)","version":"2.1.260","trackingId":[143,204,49,51,229,78,68,78,169,48,219,193,203,4,199,182]}},"requestHeader":{"interfaceLocale":"en_US","pageKey":"d_homepage-guest-home_jsbeacon","path":"/index2.html","referer":"http://192.168.253.136/"}},"eventInfo":{"appId":"linkedin.rum.tracking","eventName":"ClientPerfMetricsEvent"}},{"eventBody":{"scope":{"scopeType":"APPLICATION_INSTANCE","scopeKey":"AAXpzKxBQBzsq3zKl1nu4A=="},"metrics":[{"name":"CumulativeLayoutShift","doubleValue":-2,"metadata":{"basePageTreeId":"AAXpzKxBQBzsq3zKl1nu4A==","basePageKey":"d_homepage-guest-home_jsbeacon"}}],"header":{"pageInstance":{"pageUrn":"urn:li:page:d_homepage-guest-home_jsbeacon","trackingId":"3zWQoClLT/izauMfZ+Sb/g=="},"time":1664441392782,"version":"2.1.260","applicationViewerUrn":"urn:li:guest:c658f03e-5995-4f39-8300-901d815a5c99","clientApplicationInstance":{"applicationUrn":"urn:li:application:(homepage-guest-frontend,homepage-guest-frontend)","version":"2.1.260","trackingId":[143,204,49,51,229,78,68,78,169,48,219,193,203,4,199,182]}},"requestHeader":{"interfaceLocale":"en_US","pageKey":"d_homepage-guest-home_jsbeacon","path":"/index2.html","referer":"http://192.168.253.136/"}},"eventInfo":{"appId":"linkedin.rum.tracking","eventName":"ClientPerfMetricsEvent"}},{"eventBody":{"header":{"pageInstance":{"pageUrn":"urn:li:page:d_homepage-guest-home_jsbeacon","trackingId":"3zWQoClLT/izauMfZ+Sb/g=="},"time":1664441392796,"version":"2.1.260","applicationViewerUrn":"urn:li:guest:c658f03e-5995-4f39-8300-901d815a5c99","clientApplicationInstance":{"applicationUrn":"urn:li:application:(homepage-guest-frontend,homepage-guest-frontend)","version":"2.1.260","trackingId":[143,204,49,51,229,78,68,78,169,48,219,193,203,4,199,182]}},"requestHeader":{"interfaceLocale":"en_US","pageKey":"d_homepage-guest-home_login-form","path":"/index2.html","referer":"http://192.168.253.136/"},"pageType":"ajax","trackingInfo":{"clientTimestamp":1664441392796,"pageTag":"basic"}},"eventInfo":{"appId":"seo","eventName":"PageViewEvent","topicName":"PageViewEvent"}}]   
[*] WHEN YOU'RE FINISHED, HIT CONTROL-C TO GENERATE A REPORT.
192.168.253.136 - - [29/Sep/2022 04:49:52] "POST /li/track HTTP/1.1" 302 -
[*] WE GOT A HIT! Printing the output:
POSSIBLE USERNAME FIELD FOUND: [{"eventBody":{"pageKey":"d_homepage-guest-home_jsbeacon","isImpactedByHiddenWindow":false,"appVersion":"unknown","timeDone":285,"navigationStart":1664441392495,"boomerangStart":1664441392495,"renderCompleteTime":1664441392780,"userTimingEntries":[],"longTasks":[],"resourceTimingEntries":[{"name":"https://static-exp1.licdn.com/aero-v1/sc/h/befzsyhon4lwr1km85se5yhqy","entryType":"resource","startTime":60,"duration":99,"initiatorType":"link","nextHopProtocol":"h2","redirectStart":0,"redirectEnd":0,"fetchStart":60,"domainLookupStart":76,"domainLookupEnd":86,"connectStart":86,"connectEnd":138,"secureConnectionStart":93,"requestStart":138,"responseStart":157,"responseEnd":159,"transferSize":42706,"encodedBodySize":41568,"decodedBodySize":314540,"workerStart":0},{"name":"https://static-exp1.licdn.com/aero-v1/sc/h/dxf91zhqd2z6b0bwg85ktm5s4","entryType":"resource","startTime":61,

Can you help me to solve these assignment

Answer To: Can you help me to solve these assignment

Answer To This Question Is Available To Download

Related Questions & Answers

Submit New Assignment