![]() |
|
[Script]Automated script for MITM attack and password sniffing![/Script] - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449) +---- Forum: Wifi 5G WPA WEP Bluetooth Wireless Hacking (https://hackforums.net/forumdisplay.php?fid=104) +---- Thread: [Script]Automated script for MITM attack and password sniffing![/Script] (/showthread.php?tid=763090) |
[Script]Automated script for MITM attack and password sniffing![/Script] - ac1dxtrem - Oct 24, 2010 MITM Script Some time ago, I posted a tutorial for password and msn conversation sniffing using MITM attack. This script is specially written, for the purpose to make that tutorial more useful to people, that are not able to find their way using CLI programs and their commands. I strongly advise each one of you, first to read the tutorial. That way you can know what actually happens in the background and understand the method better. Here is the link of the tutorial: After you read the whole tutorial, you are ready to follow the basic instructions on how to use this script. I was thinking a lot of whether to give the source code due to leeching, but I don't really give a damn about it, so I figured it will be more useful to people who want to learn, if they also had the source code. Here is the source code: In my tutorial I used Ettercap+SSLstrip and in my script I'm using only ettercap. The reason why I am doing that is because after a lot of testing, I found out that the Ettercap build in sslstriper makes problems when it's combined with SSLstrip. And that SSLstrip works a lot better combined with Arpspoof for the arppoisoning and Ettercap is run only in sniffing mode. Anyway Ettercap build in sslstriper works fine so I decided to use only Ettercap instead of Arpspoof+SSLstrip. If some of you want to have an Arpspoof+SLLstrip+Ettercap version of this script I will make that one too. In order to use this script, you will have to copy-paste the above code in an empty file and save the file as ANYNAME.sh. Once that is done you will have to change the permissions via terminal like this: Code chmod 755 filenameIn our case we will replace filename with our script name, but before we type this command we have to navigate to the folder that contains our script using the cd command: Code cd folderpathReplace folderpath with the path of your folder. Also another possible solution would be instead of navigating to the folder to use: Code chmod 755 filepathOnce the permissions are changed, you can execute the script by navigating to the folder that contains this script via terminal and typing: Code ./scriptnameReplace scriptname with the name of your script. ***THE END*** p.s. ALL YOU NEED TO KNOW IN ORDER TO USE THIS SCRIPT IS ENGLISH !!!
* - sLiPpErY - Oct 24, 2010 Leeching is a problem, one reason I took my link to my tool down. I think you know alot more than most here and think you should start a blog at blogspot or somewhere, I'd follow. * - ac1dxtrem - Oct 24, 2010 (Oct 24, 2010 06:22 AM)нα¢кєя Wrote: https://hackforums.net/showthread.php?tid=339758 ... Do you know the difference between a script and a tut ? And I'm sorry but your tut is not better then mine for which this script is written :) * - sLiPpErY - Oct 24, 2010 Because I know people will read this thread because it's something they need to learn, both MiTM and scripting... I'll put this link here.. I want to help out the wifi guys.. https://hackforums.net/showthread.php?tid=763479 * - ac1dxtrem - Oct 25, 2010 (Oct 24, 2010 09:31 AM)sLiPpErY Wrote: Because I know people will read this thread because it's something they need to learn, both MiTM and scripting... I'll put this link here.. I want to help out the wifi guys.. Looks like you are not anymore with us... Anyway I know that leeching is a problem but I kinda feel generous :) * - -=HeX=- - Nov 20, 2010 Mate, the script keeps giving me wierder then fuck errors in BT4. Care to PM me the original? I think maybe it was tampered with on pastebin. * - ac1dxtrem - Nov 21, 2010 Sure man I will send it to you in inbox :) * - ac1dxtrem - Nov 21, 2010 Code #!/bin/bashHere is the original script with some minor modifications. In this version of the script I'm using only Ettercap with the built in SSLStrip plugin instead of Ettercap+SSLStrip. Also be aware that error catching system is not made 'cause I was to lazy :) So if you miss type something you will probably have to start from the beginning. I tried to PM you but there were some errors so I just replied here. Please give back your feedback after testing... :) * - -=HeX=- - Nov 21, 2010 It works now on both BackTrack 4 and Ubuntu 10.04LTS But I have not tested it on targets in the wild, just on my own net work.... In a few days it will get field tested! NICE script man!! * - ac1dxtrem - Nov 21, 2010 I am glad you like it :) For a moment I thought that no one liked it 'cause people here are so fucking scared of codes and they don't understand scripting either... Anyway please keep me posted in this thread about any problems bugs or ideas :) * - SIM-111414 - Nov 21, 2010 Very good man. Keep it up bro. * - -=HeX=- - Nov 23, 2010 A variant incorporating ARP spoofing/poisoning would make life a shitload easier... Because often it takes far too damn long to get set up and all that when all one DOESN'T have is time! Excellent work! * - ac1dxtrem - Nov 30, 2010 (Nov 23, 2010 02:37 AM)-=HeX=- Wrote: A variant incorporating ARP spoofing/poisoning would make life a shitload easier... Because often it takes far too damn long to get set up and all that when all one DOESN'T have is time! Thanks man I fully agree with you :) If you have any suggestion please share them with me I may code a second version with more options :) * - ginbot - Dec 26, 2010 Thank you man this is an awesome post * - overdoze - Dec 27, 2010 Awesome script man, saves a bit of time, thanks :) |