1. Easy Traffic Manipulation Techniques Using Scapy
Introduction
MITM 101
Easy Traffic Manipulation Techniques Using Scapy

2. Bob Simpson Introduction @bobby_simpson
Bob Simpson has fun researching security…
and is CIO for Finley & Cook, PLLC, and inventor of GhostSentry, a technology that uses MITM techniques for good purposes.

3. MITM (aka MiTM, MitM, etc.) NOT just sniffing
What is MITM?
MITM (aka MiTM, MitM, etc.)
NOT just sniffing
Involves getting in the middle of a two-way conversation
Often explained as Alice talking to Bob, with Mallory in the middle convincing Alice that she’s Bob, and Bob that she’s Alice.
Picture from

4. What is MITM? Let’s do it! [ DEMO ]
Picture from

5. What do we get?
What do we get?
Reconnaissance (fingerprinting)
NTLM capture, relay, escalation, redirection
SSL bypass
Steal and/or break credentials
Or, simple redirection ( … and the resulting software download, browser exploit, etc)

6. What do we get?
What do we get?
Pwnage!!!

7. How is it done? Google it: Tools:
Ettercap, Cain and Abel, Arpspoofing, mitmf, websploit, Burp suite, SSL Strip, middler, Fiddler2, Subterfuge, DSniff, wsniff, and commercial stuff (Hack5’s new LanTurtle)
Methods:
ICMP redirect, STP Mangling, Route mangling, imposter domains and URLs
Attacking local systems
ARP, DNS, STP, hardware
Attacking remote systems
DNS, route mangling, proxy and tunneling

8. How is it done?
Why easy is good:
From the DEF CON ROOTZ Asylum area:

9. Let’s do it! Our Setup: Tools: Scapy (packet manipulation for Python)
NFQUEUE (bindings for netfilter queue)
Method:
Bridging

10. Basic Method
Preparation:
Ubuntu (or your own flavor)
Apt-get install bridge-utils, scapy, python-nfqueue
Execution:
Follow the three steps:
Create a Bridge
Redirect Packets to Scapy
Mangle to your hearts content

11. Basic Method
Let’s do it!
[ DEMO ]

12. Summary
Preparation
Ubuntu (or your own flavor)
Apt-get install bridge-utils, scapy, python-nfqueue
Execution
Follow the three steps:
Create a Bridge
Redirect Packets to Scapy
Mangle to your hearts content

13. Google Scapy and NFQUEUE for great tutorials
Summary
Google Scapy and NFQUEUE for great tutorials

14. What would you like to know?
Q&A
What would you like to know?

15. The End
Bob Simpson
@bobby_simpson