one interface to both intercept and forward traffic), and select the relevant interface (wlan0) Under the Hosts menu, select the systems on the network you will target, or leave blank to target all systems Under Mitm, select "arp spoofing" for this example Select "Start" under the Sniffing menu Step 2: At this point, if the attacker is looking for unencrypted traffic, all she needs to do is launch a packet-sniffer, such as Wireshark, and scan through the intercepted traffic for specific vulnerable information, such as email or website logins, as well as traffic revealing shadow infrastructure usage, such as Dropbox. Recommendation Only use services with "SSL" encryption ("HTTPS"), and consider adding HTTPS Everywhere to browsers. This does not itself guarantee protection from all attacks, but it is a good first-step in protecting information (such as passwords or email) in transit from your computer to the service provider. REMOTE NETWORK AND USER DEVICE ASSESSMENT Summary This component allows the auditor to work remotely to identify the devices on a host's network, the services that are being used by those devices, and any protections in place, as well as to assess the security of the individual devices on the network. Overview There can be several approaches for this exercise, depending on the scenario. Scenario 0 Page 60 of 240