Hello guy's welcome to another article in This article we are going to discuss about how to webjacking attack method in setoolkit tutorial.
What is Web Jacking Attack Method?
The Web-Jacking Attack method was introduced by white_sheep, emgent. This method utilizes iframe replacements to make the highlighted URL link to appear legitimate however when clicked a window pops up then is replaced with the malicious link. You can edit the link replacement settings in the set_config if its too slow/fast.Step 1: Choose Web Jacking attack method
First you type this below command this command will help you to open setookit in your terminal.
sudo setoolkit
Once you open setoolkit tool in your terminal choose first option 1. Social -Engineering Attack Now you can see 10 module but you choose 2nd option website attack vector In this place you can see web jacking attack method option just choose it.
Step 2: Choose phishing Option
Once you choose Web Jacking Attack Method in your terminal you can see this below 3 option.
1. web Templates
- This is first method will allow SET to import a list of pre-defined web applications that it can utilize within the attack.
- This is second method will completely clone a website of your choosing and allow you to utilize the attack vectors within the completely same web application you were attempting to clone.
- The third method allows you to import your own website, note that you should only have an index.html when using the import website functionality.
Now you can choose 2nd option site cloner
Step 3: Choose IP address and phishing page
--- * IMPORTANT * READ THIS BEFORE ENTERING IN THE IP ADDRESS * IMPORTANT * ---
The way that this works is by cloning a site and looking for form fields to rewrite. If the POST fields are not usual methods for posting forms this could fail. If it does, you can always save the HTML, rewrite the forms to be standard forms and use the "IMPORT" feature. Additionally, really
Important:
If you are using an EXTERNAL IP ADDRESS, you need to place the EXTERNAL IP address below, not your NAT address. Additionally, if you don't know basic networking concepts, and you have a private IP address, you will need to do port forwarding to your NAT IP address from your external IP
address. A browser doesns't know how to communicate with a private IP address, so if you don't specify an external IP address if you are using this from an external perpective, it will not work. This isn't a SET issue this is how networking works.
address. A browser doesns't know how to communicate with a private IP address, so if you don't specify an external IP address if you are using this from an external perpective, it will not work. This isn't a SET issue this is how networking works.
Step 4: Victim view
Now you share your ip address to victim if your victim click your ip address means this page will be this below image.
NOTE: Don't choose your local ip address because it's only work for local network so you choose ngrok it's work globally
from ErrorsFind https://ift.tt/3sKi43q
via news
This is dummy text. It is not meant to be read. Accordingly, it is difficult to figure out when to end it. But then, this is dummy text. It is not meant to be read. Period.
Related Post
Top best Termux tools Hello guy's, Welcome to another article in this article we are going to discuss about top bes
How to hack wifi password with android without rooting_brute-force attack Hello guy's, Welcome to another article in this article we are going to discuss about how to 
Superfast SMS bomber for Linux And Termux Hello guy's welcome to another article in this article we are going to discuss about how to s
Fast SSH Scan and BruteForcer for most common credentials. Hello guy's welcome to another article in this article we are going to discuss about fast ssh
ConversionConversion EmoticonEmoticon