Questions tagged [ettercap]
a tool for performing man-in-the-middle attacks, redirecting traffic via ARP poisoning and DNS spoofing, detection of hosts on the LAN, detection of network traffic, as well as tools to inspect intercepted traffic.
20
questions
0
votes
0
answers
595
views
How to redirect ettercap or arp poisoned traffic to burp suite or mitmproxy?
I have poisoned the target using Ettercap and redirected the traffic to my IP address. The question is, how to intercept and modify this traffic using burp suite or mitm proxy?
The only condition is, ...
0
votes
1
answer
226
views
Change ettercap default port
Guys does anyone know how I can change the port that ettercap runs? I need it to run on port 8080.
When I try to run sudo ettercap -G it presents me with this error:
ERROR : 13, Permission denied
[/...
- 111
-2
votes
2
answers
164
views
Dns poisoning for any search [closed]
DNS poisoning works only if we open a certain website.
For example, a victim enters 192.168.21.56 in a browser, it will be directed to a phishing page.
What if we want to redirect the victim to 192....
- 51
1
vote
1
answer
2k
views
sslstrip gives error "exceptions.AttributeError: 'int' object has no attribute 'splitlines'" when used with ettercap [closed]
I have 3 VM's running in VirtualBox. All 3 VM's are connected to a virtual network created from VirtualBox with the IP 192.168.56.1/24
For all VM's are configured Host only Adapter
1 Linux web ...
- 133
0
votes
0
answers
158
views
Man in the middle after evil twin
I've set up an Evil twin access point using the aircrack suite, what i'm missing is how to complete the man in the middle access point side like the picture shown below, I've been suggested ettercap ...
2
votes
0
answers
538
views
MitM Attack Fails on Home Wireless Router
I am currently trying to perform a MitM attack on my home wireless network to get a better understanding on how this attack works. I can successfully perform this attack on a NAT network on some ...
- 21
-1
votes
1
answer
1k
views
ip_forward reverting back to 0 during ettercap subnet scanning [closed]
Im trying to arp spoof a local network but the /proc/sys/net/ipv4/ip_forward is reverting back to 0 when ettercap is performing subnet scan on a network hub. Even if i change it back to 1 after the ...
- 29
0
votes
0
answers
192
views
What is wrong with this ettercap dump file?
I am trying to read a dump file which is created with ettercap. But when I am trying to read it with ettercap it is saying:
Error while capturing: bogus savefile header
And I can't read the file with ...
- 113
1
vote
1
answer
336
views
How can Ettercap act as a client instead of a gateway?
I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice.
The problem that I ...
- 11
1
vote
1
answer
858
views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack MITM attack. I do the traditional ARP poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
- 161
1
vote
0
answers
1k
views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
0
votes
1
answer
2k
views
Use bettercap to sniff traffic going through a proxy configured in the browser?
Using bettercap, how can I intercept traffic which goes to a proxy server which is configured in browser?
With no proxy configured it is working fine. But as soon as a proxy is set in the browser ...
2
votes
1
answer
2k
views
ettercap filters - drop the packet and inject packet
if (ip.proto == TCP) {
if (tcp.src == 2404 || tcp.dst == 2404) {
if (DATA.data+6 == 0x64 && DATA.data+8 == 0x07) {
msg(" pos activation - drop \n"); ...
- 21
3
votes
1
answer
2k
views
How to "Scan for hosts" only using ettercap CLI?
I've been looking for a command to "Scan for hosts" in the terminal with ettercap CLI.
How can I scan the local subnet from the ettercap terminal?
The graphical ettercap has the options (see below):...
- 1,177
1
vote
2
answers
1k
views
Ettercap man in the middle - ARP poison
I am experimenting a bit with Ettercap in my local Wifi Lan.
I have a router (R), my pc (P) with Ettercap running on it and my smarthphone (S).
In particular am testing the ARP poison MIM attack and ...
- 130
1
vote
1
answer
1k
views
Where is the data generated by ettercap -T -i wlan0 saved? [closed]
I executed this command out of curiosity:
ettercap -T -i wlan0
After a couple of seconds, it started flooding my terminal emulator with loads of data (sniffed data, I guess). I think this data is ...
- 113
1
vote
0
answers
914
views
Replacing HEX data with ettercap filters
I am trying to intercept TCP traffic and alter the data in the packet using an ettercap filter.
I am man-in-the-middling communication and have set up the following filter for use with ettercap:
if (...
- 165
1
vote
0
answers
588
views
How to steal a HTTP packet, change and re-send
I'm doing a project to my college and I have this scenario:
Arduino (192.168.0.113): Receiving packets and send response
My router (192.168.0.2): WPS from my gateway
My gateway (192.168.0.1): Receive ...
1
vote
0
answers
1k
views
How to use Ettercap arp spoofing to log internet traffic (how to resolve ineffective arp spoofing)?
I want to capture all internet traffic on a small network, so I am experimenting with ARP spoofing of the default gateway but I don't see the spoofed ARP cache entries.
I am using two Linux machines ...
- 301
2
votes
2
answers
15k
views
Ettercap error - 'ARP poisoning needs a non empty hosts list'
I use Kali linux VirtualBox VM with its network adapter attached to NAT.
I checked that it is connected to the internet [made a simple apt-get update].
I run this command in a terminal:
for ip in $(...
- 121