Hacking trick by ethical hacker #shorts

What a great interview! Watch this video to find out how you can get hacked while using public WiFi.

#ethicalhacking #flipperzero #shorts #sumsub

Sumsub — empowering compliance and anti-fraud teams to fight money laundering, terrorist financing, and online fraud.

More about us:

[verumignis]

SSL/TLS exists for a reason. You can perform an ARP attack on a public network to sniff packets but you can't read them because they are encrypted. DNS is often not encrypted and so you can read and modify those packets, however if you were to modify them the client device would throw an error and refuse to connect to the server.

TLDR: other people on a public network know what servers you are connecting to but they don't know what data is being sent between you and the server and they cannot modify the data.

WiFi passwords are easy to steal by pretending to be a WiFi network known by a device, then asking that device for the password, therefore many companies use network access controls where you have to "sign in" to the network to use it. Never use a WiFi password on any other account.

[Bananaa]

This guy is not the #1 ethical hacker lmfao only reason people call him that was because he was ranked #1 on some site

[MsWorldMine]

Except almost everything is encrypted nowadays

[Amarjeet_Singh]

You can’t get passwords of ssl websites unless you install ca certificate in the victim Browser

[myname-mzlo]

you can show normies the most basic things and they think you are mr robot lol

[abu_badi]

If the website asked you to re-login when you are contacting a public WiFi, don't put it and recheck the link again

[THEDRAGONGAMER]

Him: thinks he’s smart with his fake wifi
Me: 😂 laughs with my mobile data plan

[FielValeryRTS]

I've attended a course on web security a few years ago. The speaker did the same thing and caught a few students with it.

That changed my mind quite abruptly. I'm not using public WiFi ever again. 😂

Also never selling my phone or ssd/hdd ever... There's always a chance for anyone to retrieve sensitive information.

[StiekemeHenk]

TLS + DNS over HTTPS + Mullvad VPN moment

[antichrist_revealed]

Public Wi Fi is easy to see and usually has a password they provide for you. You never have to use your own.

[thegeek]

This video promotes BYOW (bring your own wifi)

[tjmns]

Yes always disable the auto connect to networks option

[teeterthepop]

Love my hackers looking slightly malnourished

[lucianolucky]

I thought it was some kind of ARP attack he was talking about here. DNS? Come on, most of browsers pop up a big warning window if the ssl certificate is not right, tough luck to hack google’s private key and fake your own certificate

[LordMarcus]

MitM needs more than a compromised AP to work, yeah? They have to serve up a bogus SSL cert if they want to capture your passwords, cookies, etc.? Unless you're sending passwords as cleartext to your bank or w/e.

[nino]

I am an ethical thief. I even steal everything politely.

[ahmadnasir]

Its simple.. just use vpn in public network.. dont be paranoid.

[michaelproust]

Could you explain how dangerous ?What's App is in terms that for the layman?

[elir.torres]

This works if you are not using TLS, SSL, or HTTPS or iPSeC or VPN protocol.

[CZghost]

It's told to connect to a VPN if you use public Wi-Fi. The thing with VPN service provider is that it actually picks a specific IP address from their pool of IP addresses available on the picked location, so it's very robust against this DNS attack.