Lesson 21 : Phishing Attacks Details Video Lecture | Ethical Hacking using Kali Linux (in English) - Software Development

your you have purchased a new hardware
and you have just thrown out the receipt
or the box of the hardware that you have
brought not now or it can be also later
on after the warranty has passed of that
specific object but your company is
still using it and if the hacker goes
into your dumpster saying that hey I am
this is grad from this company I have to
like to collect your garbage and if he
searches your companies and if he finds
that ok this is the package that means
this company has these kinds of hardware
so what he may do the next day he may
just go ahead and wear a getup that
looks similar to a high T Hardware of
the same person of that company the
companies whose hardware you have
brought he may just come to your company
stating they're okay and this is guy
from this company and I I was given a
call sitting that your network or your
hardware has some issues so and you may
even let him inside your company you
won't even ask him twice because people
are not that secure in terms of going
ahead and searching or asking someone
else whether you are real or not so when
you come in a person dressed in with a
name of a tag of with a company's name
on your shorty they will just let you
inside and you can just go and talk to
the IT guy let him know that these are
the issues that I was called for just
figured out anything with the basic
knowledge of IT just go ahead and attach
a key logger and everything that you
have inside the computer will be
accessed by the hacker he won't even
need to install a software key lock and
he can even just use a hardware key
logger and you will not even be able to
see if his hands are quick quite fast
enough so that saw drums driving can be
dangerous so these all things are come
inside social engineering and though
footprinting to social engineering
networking sites sounds similar to
social engineering there are some
differences between the two methods
attackers can even use social networking
sites as a medium to form social
engineering attacks and I will show you
how using Kali Linux so I'll just show
you an example quickly so I have these
SC toolkit on I'll use web site attack
printers and engine harvester method
I'll show you what exactly I am doing
later on and let me check my companies
I'll be explaining this later on so this
is my IP address I'll just copy and I'll
just paste and asking me the you
alkapone let's say for example I'll be
using a Facebook random profile that I
have so I'll just use a random fake
Gmail so that I have so I'll just type
in Gmail okay let it start perfect so
I'll just copy all of this and I'll just
paste it over here I'll hit enter so
what it is doing it exactly is that it
is creating a fake phishing account that
you could go and send someone and yes I
want to start the process and I'll just
keep this on and let's say and what you
need to do is just send this IP address
to the person of whom you want to hack
so and once you do that
everything he or he will do you will be
able to see that cell just good and show
it out to you let's say for example I am
using this different PC over here and
this random guy and I'll just type and
what I would be doing I will be trying
to access the Facebook account sorry the
gmail account and so what I need to do
is that I just need to send a mail to
this person on his email id stating that
due to some reason your account of the
deactivated or any random stuff so you
need to go ahead and log in on this
specific IP address so that you can go
ahead and let's say access your account
or something like that you just need to
go to social engineer your way through
it and once that guy clicks on that it
will be something like TTP colon slash
slash and I'll just check what was the
IP address 192 168 236
then 2.16 8.36
so to 36.1 30
let's check perfect so when this guy
opens this account he will see exactly
something similar which is similar to
Gmail and you can see that it has
everything and if I go ahead and try to
log in so I have some random account
that I'll show you
or if let me check if I could go ahead
and so what this random guy will do we
will just try to go ahead and you know
try to access this website so no and ask
me later I did it won't connect the
reason being that I have not yet the
password I inserted was the fake one but
if I inserted the crit password what
will happen is I will show you over here
and as you can see we have the email id
that I used over there and we have the
password so this is a way as to how we
can go to get information although this
password was fake one that I used but if
the guy inserted the kite password or
whatever his latest password was will be
shown over here so this is an example
for that and I'll just go ahead and
close this and this as well so this is
how a social engineer apply engineering
looks like if you don't know how I did
all of these things because it might be
a bit quick I'll show you all of these
things later on when I come to the total
social engineering part of this chapter
so social networking sites are online
services