01 / 103FINFISHER: FinIntrusion Kit 2.2 Product Training
1 / 17
Télécharger la présentation
FINFISHER: FinIntrusion Kit 2.2 Product Training
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation
Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement.Téléchargez la présentation en cliquant sur ce lien.Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.
Portfolio Overview FinUSB Suite FinIntrusion Kit FinFireWire FinSpy FinSpy Mobile FinFly FinTraining FinAdvisory
FinIntrusion Kit / Operational Usage • The FinIntrusion Kit is a portable IT Intrusion kit which can be used for various strategic and tactical attacks by red-teams inside or outside the Headquarters. • Typical Operations: • Wireless Networks: • Break Encryption and record all Traffic • Record Usernames and Passwords even for SSL-encrypted sites (e.g. Facebook, MySpace, Online Banking) • Access remote Systems: • Gain access to remote Infrastructures and Webservers • Get access to E-Mail Accounts
FinIntrusion Kit / Core Features • Discover Wireless LANs (802.11) devices • Recover WEP (64 and 128 bit) Passphrase within 2-5 minutes • Break WPA1 and WPA2 Passphrase using Dictionary Attacks • Emulate Rogue Wireless Access-Point (802.11) • Actively monitor Local Area Network (Wired and Wireless) and extract Usernames and Passwords even for SSL/TLS-encrypted Sessions like GMail, Hotmail, Facebook, etc. • Crawl and extract Words from a webpage and generate a Wordlist.
FinIntrusion Kit – Menu Bar • Change Update settings and check for Updates. • Install a new License or display License information. • Choose your Language. • Display FinIntrusion Kit version and EULA. • Visit the FinFisher Support Website.
FinIntrusion Kit – Menu Bar – Updates • Change Update settings • Check for Updates now • Import an Updates Package by yourself • No online request will be done. • Update Package could be stored locally or on an external Harddisc.
FinIntrusion Kit – Menu Bar – Language • Choose your Language. Status Messages, Menu Entries, Results are displayed in your selected Language. (Configuration Parameter stored in “FinFisherDate.cfg” file) • Accept changes. • Application must be restarted!
FinIntrusion Kit – Menu Bar – Online Help • Load an after-sales website that gives the customers the following capabilities: • Download product information (latest User Manuals, Specifications, Training Slides) • Access change-log and roadmap for products • Report bugs and submit feature requests • Inspect frequently asked questions (FAQ)
FinIntrusion Kit – Network – Adapter Configuration • Network Adapter Configuration provides: • Network Information • IP – Address • Default Gateway IP Address • IP Address(es) of all defined Nameservers • (actual) MAC Address • Connection Speed • Adapter Status • Refresh Adapter List • Renew IP Address = Get an IP Address via DHCP • Possibility to Change / Spoof MAC Address from selected Network Adapter B D C A
FinIntrusion Kit – Network – Target List – Submenu - Export „Export List...“ Export a tab seperated Target List into an external Textfile. This File could be loaded e.g. with Excel. choose a Filename press „Export“ Button to generate the file
FinIntrusion Kit – Network – Target List – Submenu - Jammer Details Network Jammer initiates a „ARP Cache Poisoning“ Attack against Target PC and overwrite MAC Address from Default Gateway with an invalid value. Before (ARP Cache on Target PC) After (Start „ARP Cache Poisoning“
FinIntrusion Kit – Network Intrusion • Start FinIntrusion Kit and Tests: • Try to find & identify all Systems in the LAN. • Export a list of all Target Systems to a file. • Start a Network Jammer against your Target PC. • Monitor your Target and try to capture: • FTP, HTTP, SMTP, POP3, IMAP Passwords • „HTTPS“ Passwords with „HTTPS Emulation“ • POP3s & IMAPs Passwords • Export captured Passwords into a file. • Open URL and verify captured HTTP(S) Password.