Welcome, Guest: Register On Nairaland / LOGIN! / Trending / Recent / New
Stats: 3,152,802 members, 7,817,321 topics. Date: Saturday, 04 May 2024 at 10:18 AM

Injecting Payload Into Softwares Via HTTP - Science/Technology - Nairaland

Nairaland Forum / Science/Technology / Injecting Payload Into Softwares Via HTTP (567 Views)

2016 Gets A Leap Second: How Does One Extra Second Affect You? Read More Http:/ / How To Create Your Own Personal Config File For Http Injector / Browse And Download Unlimited Using HTTP INJECTOR With MTN Bblite Or Etisalat (2) (3) (4)

(1) (Reply)

Injecting Payload Into Softwares Via HTTP by geekmango: 9:20pm On Jun 17, 2015
Demo Link:
https://www.youtube.com/watch?v=FMahvXMYuT4

Hi, this is a quick demo about how to backdoor executables (software) sent over
HTTP using MITMF, backdoor factory
This attack works on LAN
REQUIREMENTS:
Kali Linux or any Linux OS
Wireless USB Adapter e.g. (TL-WN722N)
MITMf (man-in-the-middle framework) https://github.com/byt3bl33d3r/MITMf
MSFconsole or Armitage
LAN network, same as the target/victim
ATTACK SCENARIO:
Machine A-victim
Machine B-attacker
A situation where machine A wants to download a software for example winrar, the victim goes through google and lands on the page (http://www.win-rar.com/download.html?&L=0) the attacker is already waiting to inject payload into binaries served over (HTTP)
This attack is possible because a lot of tool websites still serve binaries via non-SSL/TLS means

(1) (Reply)

Fiber Optics Training And Certification Bonanza / So Paga Has A New Look! / Suggestions To Make Bible Topics App Better

(Go Up)

Sections: politics (1) business autos (1) jobs (1) career education (1) romance computers phones travel sports fashion health
religion celebs tv-movies music-radio literature webmasters programming techmarket

Links: (1) (2) (3) (4) (5) (6) (7) (8) (9) (10)

Nairaland - Copyright © 2005 - 2024 Oluwaseun Osewa. All rights reserved. See How To Advertise. 6
Disclaimer: Every Nairaland member is solely responsible for anything that he/she posts or uploads on Nairaland.