Select our virtual interface and apply filters.In this portion, we will use certain filters to allow us to look at only the critical information that we require in order to view and capture cookies. Task 2 – Capturing and analyzing packets. Ensure that our interfaces that we using are selected for our VM and not the actual host.Select default location and requirements.Go to and download and install on attackers computer. It can also be used to enhance our MITM attack by sniffing information that we are looking for such as cookies. We will install Wireshark, which is an open application that allows us to analyze network traffic. Module 2 – Using Wireshark to analyze traffic and steal cookies Capture HTTPS credentials and then conduct replay attack.We will also crack the hash values of our victims using CaA in order to again authentication to access system resources. In this task, we will replay the credentials that CaA sniffed and recorded for us.

Replay plaintext credentials for authentication.Conduct Man-in-the-Middle attack and capture plaintext credentials.Initiate Arp Poisoning between to VM's.This allows us to fool the two victim workstations in believing that they are communicating with each other however, since we have poisoned their ARP cache, we redirect their layer 2 destination address to us as the attacker instead. Task 2 – Install Cain and Abel and conduct ARP Poisoning Attackīy using Cain and Abel (CaA), we will conduct an ARP poisoning attack. Install Operating System (Win XP and/or Windows 7).An unlicensed copy of Windows XP and 7 will work for this exercise in order to demonstrate ARP Poisoning and the Main-in-the-Middle Attack.

We will be using Windows XP and/or Windows 7 for both victim workstation VM's and as the attacker. By doing so, we are able to replicate an actual Ethernet LAN that we are able to conduct our lab in. In this task, we will setup two virtual machines using Virtual Box. Module 1 – Setup lab and conduct initial ARP Poisoning With this type of attack we can set up a Man-in-the-Middle exploit which allows us to sniff traffic between two or more workstations and capture sensitive information such as credentials. In this course, we will conduct an Arp Poisoning/Spoofing attack using Cain and Abel.

Wireshark windows xp