ACT II - Network and MiTM attacks
Chapter 1 - The Introduction
This course, like every course here at HackTown, is based on my experience when I was operating as a cybercriminal with the techniques, tactics, and procedures I used to be successful. I was a successful cybercriminal who retired many years ago with cashing out the profits I made through cybercrime and enjoying DAT cryptocurrency boom! I've been floating around in life for quite some time and having too much time on your hands is never a good thing. Since I've always enjoyed writing I've designed these courses around my experience as a cybercriminal giving you the opportunity to duplicate my tactics, techniques, and procedures to experience financial freedom for yourself.
First off there is no one way of doing things. These courses are not the word of law when it comes to cybercrime but this is from my perspective so if you have something to add, have a better way of explaining things, or anything you think that I don't know that pertains to the topics in these courses send me a god damn email and let me know what is WAT. That way we can keep it all updated for everyone to enjoy and cause a fuck show in their hometowns. HackTown will arm you with the right information on cyber warfare which is exactly what you're wanting to learn. Good job my friend you found this place.
I wasn't too sure how to deliver this course as the topic of "what can I do once on a network" can be so vast and everyone may have their own opinions. When we come to the Man-In-The-Middle (MiTM) attack section we'll focus on when you have a RAT, malware, ransomware, file, etc. and you're ready to deliver it to people while on the same network as them. You should be getting into the mind set of aiming for targets that are within your skill level. What that means is you're not targeting American Express servers or employees but you should be aiming for compromising home networks or smaller business networks and the individual(s) that are connected to them.
There are many things to learn and talk about so I suggest doing a bunch of Adderall and/or cocaine and if you're relatively up to date with MiTM attacks this should be a solid review or maybe you can learn some new tricks. Aho!
For the best results and to maximize this course it's recommended to follow along and perform all of the examples on a home network (preferably one you own) against your host machine with Kali in VM. It's best to have the target laptop/computer/VM not running any Anti-Virus(AV) at all so nothing will interfere with the examples used in this course. The target computer should be Windows 10 (at minimum), Windows 11, or an updated macOS with default settings left on.
If you do not have another computer/device to practice targeting on then get one. No harm will come to your home network or the target device. I'm recommending to target your own home network to practice with and that way you can see how the attacks function so you're able to understand what other people will be seeing when you're performing these attacks against them. Remember not to use your laptop when doing anything illegal in the future as you do not want that connecting to anything that can be associated to your actual identity. Did you not fucking read ACT 0?
Important!I would recommend to turn off any Anti-Virus (AV) you have running. Some AV may pickup the basic MiTM attacks but it's important for you to learn the basics before diving head first into it all.
Evading Anti-Virus is a whole guide on it's own and there are too many AV's to test against and too little time.
We want to focus on real targets on the network and the reality today is the people on a Wi-Fi network generally have an updated OS. Right? We're not going after Windows 7 targets and now Windows 10 will be slowly fading out as of October 2025. We're targeting the individuals who keep their operating systems up to date and generally do not have an Anti-Virus installed. I understand people yes will have Anti-Virus software installed however, we need to build your hacking foundation up before we get into anything to do with evading AV. You should get into the mindset of infecting people locally instead of globally. I say this because it makes the targets you're after more feasible and realistic for yourself. If you understand what the majority of users around you are using you can begin to design your attacks to by-pass XYZ Anti-Virus and tailor them more to the crowd you're after. Maybe you're a hacktivist targeting some small union/government, targeting your professor to get on their laptop to alter your papers, targeting people to infect them with a RAT to steal their online banking credentials to drain their accounts, etc. Whatever it is you'll have a much better understanding of how people will react to XYZ attack because you know the population around you. We're targeting the people connected to the coffee shop network, connected to the library network, browsing their banking website on their home network, etc. We're not targeting organizations. You're not there yet ;)
Don't set your goals at infecting a million people with malware. Look to infect a few hundred. Keep it low and slow. I know you want 10,000,000 USD but why don't we aim for an extra $2000 USD a month first and then plan for world domination. Never aim big in this cyber war. Aim for smaller companies, high value targets, etc. and keep a low profile. Flash 50's not 100's.
It's highly advisable that if you're encountering problems when we come to the MiTM section of this guide to boot Kali directly and not use it in a VM. This will eliminate 99.9% of your problems when following along with this course. If you have any at all.
For example, I'm running the newest operating system that is updated with VirtualBox installed using Kali in a VM with no problems. However, when it comes to certain MiTM attacks the attacks sometimes do not function as properly as they should or work at all. For whatever reason Kali in a VM launching some MiTM attacks against other targets on the network sometimes has issues and may appear that the attacks do not work. This might be just with my setup and experience but given the fact that I'm running everything on default settings with everything updated I can only assume others will have similar problems.
So it's very important that when following along with this course that we're all using the same setup.
Please follow the pre-requisites exactly so you don't encounter any issues.
Click here to continue to Chapter 2