Hijacking sessions with Android|zAnti

greeting people ,


Bl4ck|phoenix squad ,  present you a simple way of hijacking sessions by down grade the https sessions to http  over local network with an android phone (rooted).

           








Requirements
 -> A rooted Android phone 
 -> An access to a local network 
 -> zAnti app by Zimpherium click here to download you can also download    
     on Aptiode.
 -> Superuser access to app


follow the steps to start Hijacking sessions
-> Fire up zAnti app in your rooted android phone 
-> Register with your email-id  

-> Hit the start Now button
-> Connect with a require Network 
     once it listed the devices connected to network

-> Click the targeted device 

-> Choose MITM (man in the middle) attack 
-> Select MITM method as ARP
-> On SSL STRIP 
-> On the attack

 it will down grade the https sessions to http to hijack 
(note this won't work on latest update of google chrome and firefox)

once victim arrived to his browser 
we will get sessions on the app 
-> View logged Request 
-> chose the request  (here is facebook)

-> And yeah we'll get sessions on this request 

-> if user logged in with password  

-> swipe to password 

-> we'll get the parameters
                                                                      
|EXPECT THE PHOENIX|

                         -Bit'z Ap'urv

Watch the video tutorial