How to do it...

Before running the MITM framework, we need to start msfconsole and load the MSGRPC plugin with the password configured in the MITM framework configuration file; in this example the default password is abc123.

  1. We are using MSGRPC to start the RPC service, allowing the MITM framework to use Remote Procedure Call (RPC) to configure and run modules:
 
  1. In a new terminal, we will use the MITM framework with:
    • -i to specify the interface to listen on
    • --spoof to load the spoof plugin
    • --arp to redirect traffic using ARP spoofing
    • --hsts to load the SSLstrip+ plugin
    • --gateway to specify the gateway IP address
    • --target for the IP address ...

Get Metasploit Penetration Testing Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial