June 15, 2021

What is Karmetasploit? What Does It Do? How to Install Karmetasploit?

Karmetasploit is a program used to create access points, capture passwords, collect information and perform web browser attacks. You create a fake modem or Access Point. A number of users connect to this point. You can listen to the traffic thanks to Karmetasploit.

Installing and Configuring the Karmetasploit Program

We will see Karmetasploit ready to use in Kali Linux. Our first step is to start with the download of the control file.

Installing the Karmetasploit Program
Installing the Karmetasploit Program

 

“Isc-dhcp-server” installation

When users connect to the Access Point we will create, an IP address is expected to be assigned to the connected user. In this case, we will set the Kali Linux operating system as DHCP Server. Now we install isc-dhcp-server in Kali Linux.

"Isc-dhcp-server" installation
“Isc-dhcp-server” installation

 

After the installation is complete, we make the necessary settings in the dhcpd.conf file. After making a backup of the dhcpd.conf file, you can make it similar to the example below.

dhcpd.conf
dhcpd.conf

 

Now we will set up a few requirements. First of all, we install the libsqlite3-dev Package.

libsqlite3-dev
libsqlite3-dev

 

Then we install Ruby Modules with the “activerecord sqlite3” command.

activerecord sqlite3
activerecord sqlite3

 

LEARN MORE  How to Turn On/Off Firewall in Windows?

Now that we have done the setup, we are ready to use Karmetsploit. The operations we will do will be as follows, respectively.

  • We will detect the wireless card.
  • We will start the wireless card with monitor mode.
  • We will start a new Wireless network.

As the first step, We Detect the Wireless Interface Name with the “airmon-ng” command.

airmon-ng
airmon-ng

 

As a second step, we will start the wireless card in monitor mode with the command “airbase-ng -P -C 30 -e” U R PWND “-v wlan0mon“. As seen in the following output, a new wireless interface named at0 has been started.

wireless card with monitor mode
wireless card with monitor mode

 

Now, we will add our own computer to this network.

ifconfig at0 up 10.0.0.1 netmask 255.255.255.0
ifconfig at0 up 10.0.0.1 netmask 255.255.255.0

 

We are about to start the DHCP Server. We will need a database where the information collected when the server starts will be recorded. For this, we will first create a database and start the DHCP server.

 DHCP Server
DHCP Server

 

We will start the msfconsole program as an external source, by pointing to the “karma.rc_.txt” file we downloaded at first. Now we are listening through the Acces Point we have created. A user connects to this point with a wireless connection and when he starts to operate on the web, all traffic is recorded in our database.

LEARN MORE  How to bypass WAF?

karma.rc_.txt
karma.rc_.txt

 

Now we are looking at the registered packages.

Records recorded in our database
Records recorded in our database
Records recorded in our database
Records recorded in our database
Records recorded in our database
Records recorded in our database

 

From the outputs above, we can see that the user connects to many addresses and performs operations. We will examine these outputs piece by piece.

Addresses the user is connected
Addresses the user is connected

 

In the output below, the DNS lookup process is performed for the addresses that the user wants to connect to. In this section, it is seen that the user’s password information and cookie information are collected. After these processes, it is attempted to log on to the target computer.

DNS lookup process
DNS lookup process
DNS lookup process
DNS lookup process

 

We look at what can be done in the Meterpreter session that opens. As we can see, we have seen what can be done in the session opened as an example. In addition, as information gathering continues, an incredible amount of information will be recorded. You may feel the need to check the database for their use. We are now interacting with the database.

Meterpreter session
Meterpreter session
Meterpreter session
Meterpreter session

 

The database was created in the Home folder. We will connect to the database with the following command.

sqlite3 karma.db
sqlite3 karma.db

sqlite3 karma.db
sqlite3 karma.db

 

We can check the information by using the database scheme. After that, your database is up to your information and the reporting of the recorded information.

database scheme
database scheme

 

 

 

Leave a Reply

Your email address will not be published. Required fields are marked *