Questions tagged [ettercap]

a tool for performing man-in-the-middle attacks, redirecting traffic via ARP poisoning and DNS spoofing, detection of hosts on the LAN, detection of network traffic, as well as tools to inspect intercepted traffic.

Filter by
Sorted by
Tagged with
2
votes
1answer
519 views

How to “Scan for hosts” only using ettercap (“text”) terminal interface?

I've been looking for a command to "Scan for hosts" in terminal ("text") ettercap. Do anyone knows how to scan the local subnet from the ettercap terminal? The graphical ("gtk") ettercap has the ...
1
vote
2answers
5k views

Ettercap error - 'ARP poisoning needs a non empty hosts list'

I use Kali linux VirtualBox VM with its network adapter attached to NAT. I checked that it is connected to the internet [made a simple apt-get update]. I run this command in a terminal: for ip in $(...
1
vote
1answer
302 views

DNS Hijack: Only spoofing sites listed in etter.dns

I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
1
vote
0answers
312 views

Bettercap/ettercap unable to detect HTTP packets

Basically, I am trying to sniff the network traffic from my other computer. So here's the situation: I am in a network, where: 192.168.1.1 - default gateway 192.168.1.24 - "victim" (my other ...
1
vote
1answer
490 views

ettercap filters - drop the packet and inject packet

if (ip.proto == TCP) { if (tcp.src == 2404 || tcp.dst == 2404) { if (DATA.data+6 == 0x64 && DATA.data+8 == 0x07) { msg(" pos activation - drop \n"); ...
1
vote
0answers
423 views

Replacing HEX data with ettercap filters

I am trying to intercept TCP traffic and alter the data in the packet using an ettercap filter. I am man-in-the-middling communication and have set up the following filter for use with ettercap: if (...
1
vote
0answers
471 views

How to steal a HTTP packet, change and re-send

I'm doing a project to my college and I have this scenario: Arduino (192.168.0.113): Receiving packets and send response My router (192.168.0.2): WPS from my gateway My gateway (192.168.0.1): Receive ...
1
vote
0answers
616 views

How to use Ettercap arp spoofing to log internet traffic (how to resolve ineffective arp spoofing)?

I want to capture all internet traffic on a small network, so I am experimenting with ARP spoofing of the default gateway but I don't see the spoofed ARP cache entries. I am using two Linux machines ...
1
vote
2answers
685 views

Ettercap man in the middle - ARP poison

I am experimenting a bit with Ettercap in my local Wifi Lan. I have a router (R), my pc (P) with Ettercap running on it and my smarthphone (S). In particular am testing the ARP poison MIM attack and ...
0
votes
1answer
478 views

Use bettercap to sniff traffic going through a proxy configured in the browser?

Using bettercap, how can I intercept traffic which goes to a proxy server which is configured in browser? With no proxy configured it is working fine. But as soon as a proxy is set in the browser ...
0
votes
0answers
15 views

It it possible to have Ettercap spread its work across more than one thread?

Wondering if it's possible to have Ettercap split its processing work up across more than one thread, whether by a manual "jury-rigged" abstraction layer, or if there's a way/option to have it be ...
0
votes
1answer
51 views

ip_forward reverting back to 0 during ettercap subnet scanning [closed]

Im trying to arp spoof a local network but the /proc/sys/net/ipv4/ip_forward is reverting back to 0 when ettercap is performing subnet scan on a network hub. Even if i change it back to 1 after the ...
0
votes
0answers
42 views

Ettercap syntax for multiple targets?

I'm using the Ettercap CLI, but I don't know the syntax for some arguments and options. This is my current syntax: $ettercap -T -q -F file.ef -M ARP /ip// /// How du I use multiple targets/IP:s? Or ...
0
votes
0answers
220 views

arp spoofing - arpspoof vs ettercap

I would like to perform a MiTM attack on my LAN and redirect all the traffic transmitted to my gateway. I've got the goal using arpspoof tool of Kali but I am not able to do the same thing using ...
0
votes
0answers
36 views

What is wrong with this ettercap dump file?

I am trying to read a dump file which is created with ettercap. But when I am trying to read it with ettercap it is saying: Error while capturing: bogus savefile header And I can't read the file with ...
0
votes
0answers
140 views

ettercap packet modification

I am trying to figure out how to write a plugin in ettercap which modifies the payload of a packet. I have a vm with a simply python socket server and a simply python client on the ettercap machine. ...
0
votes
1answer
102 views

How can Ettercap act as a client instead of a gateway?

I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice. The problem that I ...
0
votes
1answer
650 views

Where is the data generated by ettercap -T -i wlan0 saved? [closed]

I executed this command out of curiosity: ettercap -T -i wlan0 After a couple of seconds, it started flooding my terminal emulator with loads of data (sniffed data, I guess). I think this data is ...