Web jacking
Web jacking is a method where the user will be presented with a website saying the site has moved, and when they are redirected, they have malware inserted in the browser/computer.
In this recipe, we will web jack a site.
Getting ready
Let's ensure the following prerequisites:
- Kali Linux is running, and you are logged in as root
- Move the interface of one of your Windows test machines to the NAT network temporarily
How to do it...
We will now perform web jacking by simulating a site redirect:
- From the
Applicationsmenu, selectSocial Engineering Tools|SET Social Engineering Toolkit. You will be presented with the following screen:
Initial setookit screen
- Select the top option,
1) Social-Engineering Attacks. - Select
2) Website Attack Vectors. - Select
5) Web Jacking Attack Method. - We will select
2) Site Cloner. - Enter the IP address of the post again. In this case, my IP of
10.0.2.4. - Enter the URL site you want to clone. A sample site you can use is http://us-123hiking.simplesite.com/.
- This system...
