Cybercriminal reveals how to hack with MikroTik — Transcript

Full transcript

1. 0:00so we want to do it you want to take
2. 0:03down their Network
3. 0:04will you come to the right place as I
4. 0:07will show you how to commit cyber crime
5. 0:09and along with that I will give you some
6. 0:12tips on how to choose the best prison
7. 0:15gang available
8. 0:22now of course I'm just kidding we're not
9. 0:25gonna actually commit a cyber crime but
10. 0:27I will show you the steps that somebody
11. 0:30could take if they gained an
12. 0:32unauthorized access to one of your
13. 0:34microtic routers so please do not use uh
14. 0:39the steps that I'm about to show you in
15. 0:41real world networks as that would be
16. 0:44considered a crime and you can be held
17. 0:46liable but without further Ado so here's
18. 0:50what you could do of course if you had
19. 0:53containers enabled you could just put up
20. 0:56whatever container image you like Cali
21. 0:58image whatever but uh that's not what
22. 1:02we're gonna do today we're going to use
23. 1:05a feature of traffic generator that I
24. 1:10did a video before on but I did not
25. 1:13mention a couple of features it has
26. 1:16so that's what we're going to look at
27. 1:18right now
28. 1:19if we go to uh Tool traffic generator
29. 1:28it has a command named inject
30. 1:31it can Target a specific interface on
31. 1:34the router
32. 1:35and it accepts the data as a variable so
33. 1:39you could literally craft your own
34. 1:43packet using router scripting and then
35. 1:46inject it into a specific interface now
36. 1:49of course that again it requires quite a
37. 1:53bit of computing power if you want to
38. 1:55craft a lot of packets so you won't be
39. 1:58able to do like a flood flood attack
40. 2:00but you would be able to do some sort of
41. 2:03little
42. 2:04surgical move with that so we're not
43. 2:07going to use that in this case instead
44. 2:11we're going to use the inject P CAP
45. 2:14command
46. 2:16which takes a pcap file if you don't
47. 2:19know what that is it's just a file
48. 2:21containing recorded packets
49. 2:24so if we have remote access to a router
50. 2:27we can simply copy pcap file that has a
51. 2:33bunch of maliciously crafted packets and
52. 2:35have them injected into the network so
53. 2:39let's do that let's create a malicious
54. 2:41bcap file
55. 2:43I have Kali Linux virtual machine
56. 2:46already installed
57. 2:50if you want to learn how to do that I
58. 2:53suggest you watch my video on kwemu kbm
59. 2:56and bird manager as I show you not only
60. 2:59how to set up CHR but also other virtual
61. 3:02machines there
62. 3:04so in Kali Linux I have installed a tool
63. 3:08called yersinia
64. 3:12now this tool can do a bunch of attacks
65. 3:15but the one that I will use this time is
66. 3:18a CDP attack
67. 3:21CDP stands for Cisco Discovery protocol
68. 3:24and it is widely used by networking
69. 3:27equipment so
70. 3:30the way it works is that there is this
71. 3:33specific Mac address that says that is
72. 3:35assigned for CDP and any device that
73. 3:39accepts Cisco network discovery packets
74. 3:43is listening for packets at rest for
75. 3:46this particular Mac address
76. 3:49and it has to then process them and this
77. 3:52can be used to interfere with the
78. 3:55correct functioning of the router and
79. 3:58quite possibly overloading it and
80. 4:00causing a reboot
81. 4:02so what we're going to do is create a
82. 4:04bridge that is not used by anything and
83. 4:08we will launch an attack on this bridge
84. 4:11and at the same time I will use
85. 4:14Wireshark to record a pickup file
86. 4:17terminal I want to create the interface
87. 4:28now that I've created the interface I
88. 4:30will start up Wireshark
89. 4:35as you can see
90. 4:37there is this interface I named virtual
91. 4:39I'll just start recording
92. 4:42now I can open your senior
93. 4:48and there on the edit interfaces I can
94. 4:50just select this um bridge I just
95. 4:54created and disable anything else
96. 4:58then I'll click launch attack
97. 5:01there's a whole bunch of attacks that
98. 5:03you could do here so I'm interested in
99. 5:06the CDP flooding attack
100. 5:10so I'll just click OK and immediately
101. 5:13thousands of packets are being forged
102. 5:15and then I'll immediately stop it
103. 5:19Now list attacks stop
104. 5:23if we do not stop it pretty much
105. 5:26immediately it will generate an absurdly
106. 5:29large pcap file it's very likely that it
107. 5:33will crash your uh Kali a virtual
108. 5:36machine so that's why I had to stop it
109. 5:39right away
110. 5:42now I've stopped the Wireshark as well
111. 5:44and I can save the pcap file click on
112. 5:48save as
113. 5:50let's call it CDP
114. 5:53flood
115. 5:57and select the pcap file format
116. 6:07okay I have it in my home folder and
117. 6:09I'll just enable
118. 6:11um SSH service so that I can copy this
119. 6:14file out of my virtual machine
120. 6:17now on my host I can open the terminal
121. 6:22do SCP
122. 6:24Cali at
123. 6:31192.168.122.217 which is the IP address
124. 6:33of my virtual machine
125. 6:36followed by column
126. 6:38and I named it CDP underscore flood
127. 6:43dot b cap
128. 6:45and I'll save it on my desktop
129. 6:51okay I've copied the file as you can see
130. 6:53it's already
131. 6:55384 megabytes from just those few
132. 6:58seconds of generating the attack
133. 7:01and now I just need to copy that file
134. 7:03onto the router I'll just drag and drop
135. 7:05it into the win box
136. 7:11okay the file has been copied on four
137. 7:15Network conditions of sleep and it will
138. 7:16take quite a while you don't necessarily
139. 7:19need 300 plus megabytes large pickup
140. 7:22file if you launch the attack very
141. 7:26briefly it would still be thousands of
142. 7:29neighbor Discovery packets and that that
143. 7:34might still be enough
144. 7:37to cause issues so a smaller 100 Mega
145. 7:40megabyte file perhaps would have suited
146. 7:43as well you need that storage space or
147. 7:46at least enough space on the ram of on
148. 7:49this router
149. 7:51for this to be possible but I got my
150. 7:54pickup file ready so I'll just launch
151. 7:56the attack on this unsuspecting Hub AC
152. 8:00squared
153. 8:02of course if I had this interface
154. 8:04connected to a switch with a lot of
155. 8:07devices then I would be targeting all of
156. 8:11them at the same time if they are
157. 8:13listening to the CDP Mac address
158. 8:16so I'm just going to click inject B cap
159. 8:19select the correct interface which is
160. 8:21either five for me select the pickup
161. 8:24file
162. 8:25so I named it CDP flood
163. 8:29and I will also take this Loop check
164. 8:32mark
165. 8:33before I click Start because if we
166. 8:36simply inject in all these packets it
167. 8:39will add all of these neighbors to this
168. 8:42target router but it might not crash on
169. 8:46the other hand if we Loop it the router
170. 8:49will still have to process that those
171. 8:51packets even if those neighbors already
172. 8:53exist so that will cause it to crash
173. 8:57if I click Start
174. 9:01we should see that a thousand thousands
175. 9:04of packets are getting injected
176. 9:10so yeah you can see the numbers are
177. 9:12going up there's hundreds of thousands
178. 9:15over a million of packets injected
179. 9:17already and and of course the router
180. 9:21disappeared from our neighbors list
181. 9:24because it rebooted I will stop the
182. 9:26attack
183. 9:27let's see when our Target shows up in
184. 9:30the neighbor list again
185. 9:39it took around 1 million neighbor
186. 9:40Discovery packets for this little home
187. 9:42router to reboot itself that's more
188. 9:46neighbor announcements that it would see
189. 9:50in its entire lifetime probably a larger
190. 9:53router will probably require more but
191. 9:56regardless you can use a relatively low
192. 9:59powered Microtech router to wreak havoc
193. 10:03on a network
194. 10:04thank you for watching I hope you found
195. 10:06this interesting and I'll see you in the
196. 10:08next one
197. 10:14foreign