3

As part of a security research, I need to make my WiFi open, and to inspect the traffic of the ones who connect to it. Additionally, I need to be able to change the content of the webpages they see, and generally to act as a man in the middle.

  1. Do you know relevant tools or tools that already do this?

  2. Can someone give me some guidelines and relevant references?

  3. Which technical problems I might face during the development process?

  4. Which platforms/languages are recommended for such a project?

Improve this question

3 Answers 3

Reset to default
2

I'd like to suggest Ettercap, a free and open-source network security tool for man-in-the-middle attacks.

I recently used its ARP spoofing functionality in an Ethical Hacking / Penetration Testing training, and was amazed how easy it is to set up.

It's included in the Kali Linux distribution.

Improve this answer
2
  • Ettercap is a tool for ARP Spoofing. In my case, I don't need any attack to gain MITM capabilities: I control the router.
    – Gari BN
    Apr 28, 2014 at 14:43
  • Ettercap offers other modes of operation. See the feature list.
    – Steven Volckaert
    Apr 28, 2014 at 14:45
1

Easiest way is to just set up a proxy that do whatever is needed. This article is a classic and good starting point: http://www.ex-parrot.com/pete/upside-down-ternet.html

Improve this answer
4
  • How can I redirect all the traffic to/from my router to a proxy? Is there any generic way?
    – Gari BN
    Apr 28, 2014 at 12:51
  • 2
    You are up to no good, are you..?
    – KristoferA
    Apr 28, 2014 at 13:05
  • For research. It is my idea for a project in advanced cyber security course.
    – Gari BN
    Apr 28, 2014 at 14:21
  • Are you looking for real world exploitation, or simply controlled experiment? Real world would be ARP poisoning or DNS hijacking to accomplish this.
    – David Houde
    Apr 28, 2014 at 14:47
1

Look into Karma/Karmetasploit and the Dsniff suite of tools... Also something like Firesheep might me useful too in some cases.

At a basic level Karma/Karmetasploit is really all you need. Based on what you're asking, go look into what Karma and/or Karmetasploit (which is just Karma merged into/with Metasploit) can do.. Everything you're asking for and more. It's a brilliant tool.

Dsniff is a suite of sniffers and sniffer helpers: "Dsniff is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI."

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .