[нα¢кєя]

What we need
1. Backtrack 4 (i recommend it but not compulsory)
2.If you donot have backtrack then you can download and run ettercap from google ..
3. Common sense

Lets start

Question comes whats ettercap ?

Ettercap is a suite for man in the middle attacks on LAN.,DNS spoofing etc..

What we are gonna do ?
We are going to perform man in the middle attacks using a basic method called arp poisoning..

Now if you donot know what is arp poisioning then i suggest you google it :) before moving forward


So now we know what the hell is arp poisoning now we gonna see what actually happens when we do arp poisoning
What actually happens.. ?

Before ARP poisoning


[IMG]http://img121.imageshack.us/img121/297/54830965.jpg[/IMG]

After poisoning


[IMG]http://img706.imageshack.us/img706/4702/81179186.jpg[/IMG]

Now the Method USING BACKTRACK 4 :

First open Ettercap in graphical mode using :
In konsole
# ettercap -G

[IMG]http://img256.imageshack.us/img256/6474/81563117.jpg[/IMG]

Uploaded with ImageShack.us
Select the sniff mode to sniff all the host connected on a LAN

Sniff → Unified sniffing


and
Scan for host inside your network using
Hosts → Scan

After scan is complete we go and check the host list we got.

[IMG]http://img196.imageshack.us/img196/2711/71999988.jpg[/IMG]

Now we see the MAC and IP addresses of the hosts inside the window
( Hosts → Hosts List)

These are the machines which are connected in a LAN .
From this list we need to select the machines we need to poison.

Now we choose to ARP poison the machine 192.168.1.2 (in my case) ..you can use other machines from your host list whom you want to poison and remember that the IP of the router will always be 192.168.1.1.

Next
Highlight the line containing 192.168.1.1 and click on the "target 1" button.
(It means this entry will be poisoned in the victim’s arp table so that all that victim uses on internet will first go through us.)

Highlight the line containing 192.168.1.2(in my case) it’s the victims IP address and click on the "target 2" button.

[IMG]http://img706.imageshack.us/img706/4476/98915871.jpg[/IMG]

To start the ARP poisoning:
Go to

Mitm → Arp poisoning
[IMG]http://img193.imageshack.us/img193/6853/87407199.jpg[/IMG]

and start the sniffer to see the activities and its done ! whatever address victim will visit you will be able to see it :)

Method using Windows :
Download ettercap for windows and rest of the steps are same :)😉

Note : ettercap in BT is not in GUI mode you may need to install GUI mode if you don't know how to use non GUI one

Use "apt -get install ettercap-gtk" ✌

🤝

This is completely written by me so please if you leech it don't forget to post credits
😝

If you have prblems seeing the images then see them here
http://img121.imageshack.us/gal.php?g=54830965.jpg

[Charity]

Looks like a good tutorial. Only thing is the pictures wouldn't show for me and the ones in the bottom link didn't look like they were in any particular order (maybe that's just me at a glance).

[Xch4ng3]

All of your images are broken.

[auToeXeCfl00d3r]

nice tut cant wait to ill try it

[нα¢кєя]

Looks like a good tutorial. Only thing is the pictures wouldn't show for me and the ones in the bottom link didn't look like they were in any particular order (maybe that's just me at a glance).

All of your images are broken.

ill try to fix that :)
thank you

[HowD]

Or you could sniff the network with cain and abel .

[-mothered-]

Looks like a good tutorial. Only thing is the pictures wouldn't show for me and the ones in the bottom link didn't look like they were in any particular order (maybe that's just me at a glance).

Agreed mate. The exact same thing Is happening to me.

[нα¢кєя]

Agreed mate. The exact same thing Is happening to me.

IDk pics now loading for me

ill just use some other host

[TehManyFacedGod]

Hmm nice tut, might come in handy for those who don't know this stuff

[нα¢кєя]

Hmm nice tut, might come in handy for those who don't know this stuff

thank you and images are working now right ?

[mKn1ght]

Nice tutorial man! Btw the images are working perfectly :P

[~raiGeki~]

I tried with windows and it's working!!!
This will be very usefull. Thanks a lot!

[hemanthvrm]

nice tut should try..............

[jammmie999]

how do i perform packet injection e.g. turn images upside down etc?

Thanks

[нα¢кєя]

I tried with windows and it's working!!!
This will be very usefull. Thanks a lot!

nice to see it working