As part of a security research, I need to make my WiFi open, and to inspect the traffic of the ones who connect to it. Additionally, I need to be able to change the content of the webpages they see, and generally to act as a man in the middle.

  1. Do you know relevant tools or tools that already do this?

  2. Can someone give me some guidelines and relevant references?

  3. Which technical problems I might face during the development process?

  4. Which platforms/languages are recommended for such a project?


I'd like to suggest Ettercap, a free and open-source network security tool for man-in-the-middle attacks.

I recently used its ARP spoofing functionality in an Ethical Hacking / Penetration Testing training, and was amazed how easy it is to set up.

It's included in the Kali Linux distribution.

  • Ettercap is a tool for ARP Spoofing. In my case, I don't need any attack to gain MITM capabilities: I control the router. – Gari BN Apr 28 '14 at 14:43
  • Ettercap offers other modes of operation. See the feature list. – Steven Volckaert Apr 28 '14 at 14:45

Easiest way is to just set up a proxy that do whatever is needed. This article is a classic and good starting point: http://www.ex-parrot.com/pete/upside-down-ternet.html

  • How can I redirect all the traffic to/from my router to a proxy? Is there any generic way? – Gari BN Apr 28 '14 at 12:51
  • 2
    You are up to no good, are you..? – KristoferA Apr 28 '14 at 13:05
  • For research. It is my idea for a project in advanced cyber security course. – Gari BN Apr 28 '14 at 14:21
  • Are you looking for real world exploitation, or simply controlled experiment? Real world would be ARP poisoning or DNS hijacking to accomplish this. – David Houde Apr 28 '14 at 14:47

Look into Karma/Karmetasploit and the Dsniff suite of tools... Also something like Firesheep might me useful too in some cases.

At a basic level Karma/Karmetasploit is really all you need. Based on what you're asking, go look into what Karma and/or Karmetasploit (which is just Karma merged into/with Metasploit) can do.. Everything you're asking for and more. It's a brilliant tool.

Dsniff is a suite of sniffers and sniffer helpers: "Dsniff is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI."

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.