Hello everybody and welcome to this tutorial. Today, I've decided to do
something a bit more fun, to ease the path so to say, and we're gonna be doing
some sort of thing that people generally do for April Fool, or something of a kind.
Basically, you get to modify the browsing information
of anybody that you can spoof, who's ARP you can spoof. And what this
means is that you can actually affect how they view websites. For example, you
can flip their images, you can flip all images on a website upside down, or you
can insert text, or perhaps you can add extra words to Google search. Or, I don't
know, you can do some crazy things like change language settings to
something ridiculous. Like there are these fictional languages, something from
Star Trek. I do believe that I found it on the net, a small script, that actually
changes your language settings to Klingon while browsing the Internet. Can
you just imagine reading anything, trying to read something, or trying to translate
it back, or something of a kind? That wouldn't really be fun. Anyway,
even though this is primarily for fun, this part anyway, I
would definitely still of course would need a permission, unless you are
on your own Wireless, or something of a kind. Anyway, let's just go. I have a small
instruction script for myself here just so that I don't mess anything up during
this procedure. I have already done it and it seems to work to a good extent.
Some of the scripts they won't always work, but a good amount of the time you
will be able to achieve what you want. Anyway, first of all we need
something called squid, and squid is a proxy. So let me just show you, apt-cache
search squid, and I'm gonna say 3. Also, you might have noticed that I am back in
kali linux, and kali linux comes with a lot of
these tools pre-installed so I don't need to go through a lot of hassle, or
something like that, and the configuration is a bit simpler as you
have a setup predefined here. Also, I don't need direct access to wireless
for this sort of an attack. Anyway, we're gonna need to
install squid. You can see here, squid3 - Full featured Web Proxy cache (HTTP
proxy). In order to install it, oops not yum, type in apt-get install, and then squid3
-y, press ENTER, and this will install it. I'm
not gonna press ENTER now because I already have it installed. That is one of
the tools which we are going to need but there is more. You will need apache
webserver for this, so again apt-get search, and we're
gonna need apache. Apache is a well known, oops
it's not get, it's cache. Apache is a well known web server used by the majority of
the world today. I don't know what percentage of users
actually uses Apache, but lately there were some other web servers which became
really popular. For example, nginx that gained on popularity
really fast. It apparently its a lot faster. You can't find the exact name
of the package here, but it doesn't really matter. Look, just type in
apt-get install apache2, press enter, and
there you go. It says that Apache 2 is already the newest version, and it
doesn't really...oh, wait I need 62 upgrades. It doesn't matter, I'm not going to
do any of the upgrades now. But, anyway, this is the command to install it,
Apache 2 is the name of the package. I could have found it in
the list up there, but I figured I would just save some time and give you the
direct command for you to install it, so that we don't have too much of a time
loss there. Anyway, go ahead and clear the screen. The next thing that you're going
to need is a bunch of scripts, and I do believe I have them here. No, not these
scripts. Hmm...where do you suppose they are? Well, ok, I do have them, but they are on
my clipboard. Okay, so it's apt-get -y install, and you need these
three programs. So, imagemagick, ghostscript and jp2a. I've written for myself
here ghostscript optional...you will only need ghostscript for
certain scripts that we're gonna download from the net. Not sure exactly
which ones but you can just install it, it doesn't take a lot of space, and it
doesn't take a lot of time. Let me just see if I have all of them installed, and yes
I do have all three of them installed here, so no problems there. But if you
don't, just go ahead and run the same command of course and you will have it
installed, no problems. Just go ahead and clear the screen. Anyway, those three
tools we are going to need in order to actually perform this attack. So, let's
just go over them one more time. It's squid3, Apache, and these last three
scripts that I have showed you, not three scripts, sorry, I keep on calling
them scripts. Well, this one is a script interpreter, and this is
actually, I don't know, this is just a program for manipulating images
on the web, or something of a kind. Anyway, so these three as well and then we will
be able to perform this attack. Make sure that you have them all installed. You
don't need to configure anything, we will do the configuration in the next
tutorial. But make sure that you have all three of them installed
before you start watching the next tutorial because there I will actually go into
the configuration, and we will see what we need to do in order to prepare some
of the things we've already done, if you kept the configuration from the previous
tutorials, but if not you're gonna need to do a few things here. Anyway, I bid you
all farewell, and I hope to see you in the next tutorial.