AmplitudeAuditiva

HACKING PASSWORDS USING CREDENTIAL HARVESTER ATTACK

REQUIREMENTS

1. Kali Linux OS
2. Target Website

STEPS TO FOLLOW

• Run the Kali Linux machine. If you have not Kali Linux installed, you can grab a free copy and install it as a virtual machine. You can learn more about Kali Linux VirtualBox installation.
• Sign in to Kali Linux by entering username root and password toor.
• As you'll sign in, navigate to the Applications > Social Engineering Tools > Social Engineering as shown in the following screenshot.
• Now you will see the different options. You have to choose Social Engineering Attacks by simply entering its number in the terminal. Once you do it, it will show a few options further. Simply choose Website Vector Attack by putting its number.
• Website vector attack will show up it's a different type of attacks. We are going to use Credential Harvester Attack.
• Choose the Site Clone option. As you do it, it will ask for your public IP address. Just open up a new terminal and type ifconfig. It'll show the public IP. Just copy it and paste in the previous terminal as shown in the following screenshots.
• After we do it. Enter the target website of which passwords you want to hack. Make sure to use a website that has username and password on the same page.
• All done now. As someone opens up the browser on the public IP we specified, it'll show up the website that we entered in the previous step. Now as someone enters their username or password, it will be captured in the terminal.