Title: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: don on March 14, 2008, 11:42:22 AM

This one uses MySpace as the hypothetical target. Expect many more of these from Brian, our resident Cain expert. Well done my friend.

Permanent link: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain (http://www.ethicalhacker.net/content/view/182/1/)

Quote

By Brian Wilson, CISSP, CCNA, CCSE, CCAI, MCP, Network+, Security+, JNCIA

Last year at ChicagoCon 2007, Brian Wilson gave a great talk entitled "Cain & Abel: Windows Can Hack, Too!" Although the presentation and audio recording of the talk can be downloaded from the ChicagoCon Media Lab (http://www.chicagocon.com/content/category/2/6/12/ class=pathway) (http://www.chicagocon.com/templates/yt_smoove_lounge/images/arrow.png)
2007 Evening Presentation Files (http://www.chicagocon.com/content/view/33/12/), I had totally forgotten to publish his videos. Just in case things didn't go as planned during the live event or his laptop crapped out on him, Brian made a video of the MITM attack he demonstrated using Cain. They made it on the DVD passed out to the attendees, but unfortunately not in his column... until now!

Although we often talk about this incredibly versatile tool here on EH-Net, for the uninitiated...

Cain & Abel (http://www.oxid.it/cain.html) is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols.

(http://www.ethicalhacker.net/images/stories/vitals/news/chicagocon2008s/chicagocon2008s_468x120.jpg)
(http://www.chicagocon.com)

View other presentations from ChicagoCon 2007. (http://www.chicagocon.com/content/category/2/6/12/)

Thanks again Brian. Please offer Brian your thoughts and also requests for additional Cain vids.

Don

Title: Re: [Article]-Video: Man-in-the-Middle Attack with Cain
Post by: Andrew Waite on March 14, 2008, 11:48:28 AM

Brian,

nice video, I've had Cain&Abel on my 'Must look at' list for a while. Think you've just jumped it to the top of the queue.

Thanks

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: don on March 14, 2008, 03:36:47 PM

Sir Brian has never made it to diggs front page or slashdotted. Let's help make it happen for him.

http://digg.com/microsoft/Video_Man_in_the_Middle_Attack_on_MySpace_with_Cain

You have 24 hours to do your part!!

Don

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: pseud0 on March 15, 2008, 09:09:35 AM

Sweet mamba-jamba!! Slashdotted!!
http://it.slashdot.org/article.pl?sid=08/03/15/1242252&from=rss

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: Andrew Waite on March 15, 2008, 09:27:05 AM

Quote from: pseud0 on March 15, 2008, 09:09:35 AM

Sweet mamba-jamba!! Slashdotted!!
http://it.slashdot.org/article.pl?sid=08/03/15/1242252&from=rss

w00t!

Hows the site holding up under the legendary /. effect Don?

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: LSOChris on March 15, 2008, 11:15:01 AM

thanks for the link and the reminder why i dont read slashdot, most of those replies are pure garbage.

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: don on March 15, 2008, 11:24:18 AM

So far so good.

Congrats, Brian. Helluva week for you my friend. Your good fortune is well deserved.

Don

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: slimjim100 on March 15, 2008, 12:49:26 PM

Thanks everyone!!!! Don called me on my Cell and told me I was slashdot'ed. I was on a 3 mile hike with my kids for Cub Scouts... I was like wow and I told some of the other fathers out on the trail and they where like what is slashdot and I said never mind. lol

Brian

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: LSOChris on March 15, 2008, 09:41:17 PM

that's awesome

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: slimjim100 on March 15, 2008, 10:11:49 PM

Wow over 8,000 hits to the video in 12 hours thats crazy! I hope Don's hosting company does not charge him to much for the extra bandwidth. Anyway thanks again for all of you guys/gals support. I will be doing a newer live demo of Cain & Able at Chicagocon this year and if all goes right I hope to show you how to own and record VoIP calls, Take over Cisco routers, Crack WEP with packet injection (yes in windows) and so much more. Cain is truly a good place to learn a lot of hacking and auditing skills on a Windows PC.

Brian

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: subbukl on March 22, 2008, 08:07:55 PM

dont you think arpspoof and etherial is much simpler for this ?
~

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: LSOChris on March 22, 2008, 09:23:20 PM

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: slimjim100 on March 23, 2008, 11:05:08 AM

Well I do like Ethereal but only after I have a good APR with Cain going then I can look at all traffic on a subnet for trouble shooting. It's like making a mirror or trunk port on a switch that might not have management features.

Brian

Title: Re: [Article]-Video: Man-in-the-Middle Attack on MySpace with Cain
Post by: don on April 15, 2008, 08:31:14 PM

Congrats, Brian!!

100,000 Page Views!!

Don

EH-Net

Columns => Wilson => Topic started by: don on March 14, 2008, 11:42:22 AM