OK so this video I'm going to show you how to capture FCP off the wire Using pi shock.
So I'm using a Python script once again I'm importing pi shock.
I'm doing a live capture on Ethan at zero so this a boon to host is going to be capturing traffic in
real time off.
Ethan at zero.
And then I've got a loop here saying that for packaging capture if it's an FTE Pete packet.
So look for ATP in the packet.
In other words find out if it's an FTB packet.
This is a try an exception rule which basically says try and do something if there's a problem with
the output here.
Then just continue with a script don't break the script so try and do the following output equals packaged
ATP.
So we're looking for an FTE packet.
And then if we find a user in this output which I've made a string print username and then print the
actual output as a string.
Otherwise in other words else if look for past in the string and then print this output out.
So it's actually gonna be easier just to show you.
So let's run the script and then I'll show you what it's doing exactly again.
So I'll create a script called F2 PD or P Y paste that script in.
So this is a very basic script that I've written once again.
A cat FCP dot P Y there's a very basic script.
What I'll do now is run that scripts of Python TPD or P Y so Python 3 running FCP P Why nothing's happening
at the moment but what I'll do is copy the running config from the router to the tool box server.
So the first thing I need to do is specify a FTB username which in this case I'm going to specify is
root and FTB password.
In this case is going to be genus 3.
That is the username and password that I need to use on the FTB server which is running on tool box
1.
So this is the FTB server ip address ends in 99.
So let's get that a boon to console up here it is.
And then on the router what I'll do now is copy the running config from the router to the FTB server
ip address 1 1 2 1 6 8 122 9 9 that's the IP address of the tool box server config will be that this
will then log into the FTB server and copy the config which it's done.
Notice writing config that's been done but notice on my a boon to host.
I can see username is root password is genius 3 I've just formatted the output nicely using this little
script.
So looking for user they would found it prints this output so prints username.
There we go prints the output that's what it's captured.
So the FTB layer.
In other words in the 0 assigned model it's not Layer 2 it's not layer 3 it's highly is.
So this is actually an application FTB runs on TTP so it's not layer to Ethan it not 3 which is IP not
4 which is TTP.
It's layers 5 to 7 FCP User username is this password is genus 3.
You can see that in the output there.
So it's looking for the username looking for the password and essentially printing it out.
So let's do that again.
Copy running config FCP FTB server is this.
Notice once again that I'm copying the config from this writer to this tool box but because I'm running
span here the boon to client is seeing this.
Now you could use hacking tools like it to cap to poison the network or you could do other things such
as set up a rogue DHEA piece over and default gateway to manipulate where traffic goes and I'll show
you some of those using Kelly Linux in this course.
So copy the config to the FTB server it's done.
And notice there again is a username and password so you could once again run the script and simply
get this running in the background and save it to a file or email it to you or do something else so
that you get the username and password off the wire.
Okay so that was an example of ATP.
Let's try telnet telnet is not a good idea.
Neither is FCP another clear text protocols in a network.
We should use encrypted protocols whenever possible.