EvilZone
Hacking and Security => Hacking and Security => Topic started by: @rjun on November 24, 2014, 05:27:07 AM
-
Is there anyway i could run a keylogger from a router to get logs of the activities of computers connected to internet via it?
Or i only have one way to run attacks like FakeAp,HoneyPot,(then use sslstrip)?
-
What router? What firmware (some let you run tcpdump)? Do you have physical acces?
-
Is there anyway i could run a keylogger from a router to get logs of the activities of computers connected to internet via it?
Or i only have one way to run attacks like FakeAp,HoneyPot,(then use sslstrip)?
You cannot run keyloggers on routers lol , there is no keyboard now is there, lol.
As hppd suggested a packetdump might be possible.
Learn the basics kid.
-
what i mean is, the traffic goes through router like credentials,etc so is there anyway to filter data and keep those credentials under log files, some script??
By keylogger i mean some script, sorry for the mistake.. ;)
-
just found this...
https://ask.wireshark.org/questions/1213/how-to-catch-everything-that-goes-through-my-wifi-router
Might be worth a try.
-
just found this...
https://ask.wireshark.org/questions/1213/how-to-catch-everything-that-goes-through-my-wifi-router
Might be worth a try.
LoL those days all web sites are https that means they encrypt the information before they send it to internet. Example if your password is 123456 they use a fucking algorithm that transforms it into */&$#^#$ stuff like that
-
What about dsniff.?
You could arpspoof the entire network and use sslstrip ...
It could make Internet access slow..
I don't know if this will work, Just a suggestion..!!
-
Try flashing openwrt, then you can sniff everything :)
-
You have to do the classic Man in the middle attack (more precise, ARP spoofing) Obviously, first of all you have to bypass ssl protocol (using sslstrip, for example). I give you the right way, than go on with your legs :)
-
DNS redirect to an exploit kit that downloads a keylogger when they go to google?
I'm assuming you have the ability to change the settings on the router?
Peace
-
sslstrip is on its way out as an effective tool. Sites like facebook, google, amazon, etc don't let you use the site unless you're using https.
-
sslstrip is on its way out as an effective tool. Sites like facebook, google, amazon, etc don't let you use the site unless you're using https.
and unless they are forcing HSTS with a looong timeout length AND the browser receives the header before being mitm, forcing https is useless. The attack will just make the ssl connection for you then hand you the plaintext.
-
sslstrip is on its way out as an effective tool. Sites like facebook, google, amazon, etc don't let you use the site unless you're using https.
Its been 'dead' for a long time.