maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   [Announce] Yet another MITM attack script (Yamas-ARM) (https://talk.maemo.org/showthread.php?t=73988)

empty 2012-05-18 17:38

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Yamas was working fine for me with the newest everything
"kp50 nmap etc" until I was trying to close it with the 5. Quit Properly option , a message popped up in red " Bad choice bro" looking at the yamas.ph there is something about "was motherfer during my tests" now I am getting the sh: 1: unknown operand error. I have tried all the suggestions on how to fix this error from previous posts in this thread with no luck. yamas -e still works fine by the way. Any Ideas?:D

sifo 2012-05-18 17:43

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
I dont know maybe re-installing YAMAS will solve the problem :confused:

empty 2012-05-18 17:52

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Nope tried that, I wish it was that simple lol

Swirnoff 2012-06-14 18:57

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by jacksprat (Post 1192123)
Only problem is the refreshing thing. Browser either gets stuck or takes ages to login-in or freezes completely, or comes up with that msg on a blank page - 'location: ht'.

Same problem here. Network gets really slow, target browser displays "location: ht", and requires a refresh before it slowly loads the login page.

Is the network speed related to processing speed of N900, or does the code just needs ironing out?

Thank you for all the hard work, btw

mr_pingu 2012-06-14 19:28

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by Swirnoff (Post 1221979)
Same problem here. Network gets really slow, target browser displays "location: ht", and requires a refresh before it slowly loads the login page.

Is the network speed related to processing speed of N900, or does the code just needs ironing out?

Thank you for all the hard work, btw


It's because the usage of SSLstrip ;) You can do MITM attacks without SSLstrip on normal http sites with eg ettercap to avoid this. However this prevends from reading password from eg https://www.gmail.com

Swirnoff 2012-06-14 19:38

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Would using a laptop with BT5 for SSL stripping, instead of N900, decrease network lag for target machine?

mr_pingu 2012-06-14 19:43

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
@empty: Probably you installed nmap v5.59BETA

try to install nmap v5.50-2

Code:

root
apt-get install nmap=5.50-2


mr_pingu 2012-06-14 19:44

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by Swirnoff (Post 1222001)
Would using a laptop with BT5 for SSL stripping, instead of N900, decrease network lag for target machine?


Yes from a laptop it's smoother but still it will never be as fast as the "normal" network.

q6600 2012-06-16 09:02

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Hi
I am using qt mobile hotspot with yamas but i don't know hot to tell yamas to listen on wlan0. Because i use qt mobile hotspot, yamas target the phone ( gprs0 ) and not the wlan0. How do i tell yamas to go on wlan0?

I think is not working qt with kp50 on kp49 no problems.

akitta 2012-07-18 16:51

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
I have not installed yamas. But i have ettercap, dsniff, sslstrip...etc.
I had to flash my phone. Now etter.conf is not located in /etc/.
Any ideas were it is..?

q6600 2012-07-19 10:30

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
find -name etter.conf

lucas777 2012-09-19 12:59

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
So if i wanted to add m.facebook.com to yamas how would one do that, atm its working perfectly fine from my laptop but any mobile sites dont work.. gumtree works on laptop gmail works

samipower 2012-10-05 07:29

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Hello with latest maemo css testing update in 1-4 october broken yamas.

yamas do not start.

I write yamas -d for I can see a missing dependencies and say:

yamas -d

Checking for the needed dependencies:
wget [Success]
busybox-power grep: invalid option -- w
BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso31+0cssu0) multi-call binary

Usage: grep [-HhrilLnqvsoeFEABC] PATTERN [FILEs...]

[Failed!]
Dsniff(arpspoof) grep: invalid option -- w
BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso31+0cssu0) multi-call binary

Usage: grep [-HhrilLnqvsoeFEABC] PATTERN [FILEs...]

[Failed!]
xterm grep: invalid option -- w
BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso31+0cssu0) multi-call binary

Usage: grep [-HhrilLnqvsoeFEABC] PATTERN [FILEs...]

[Failed!]
iptables [Success]
nmap [Success]
grep [Success]
pcap [Success]
sslstrip [Success]
python-twisted-web [Success]
python-openssl [Success]
You are missing dependencies, this script will fail : exiting !

edit:

SOLVED

sudo gainroot
apt-get install python-pyopenssl
apt-get remove busybox-power
apt-get install busybox-power
N900 reboot and it works

midcex 2012-10-14 10:17

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
anything be for n900 http://www.ubuntubuzz.com/2010/05/se...ion-using.html

eennbb 2012-10-15 23:20

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Hi, someone tried this in meego (n9), is possible??? why???

droll 2012-12-06 14:03

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
yamas doesn't work for me at all. previous version used to work. but not anymore with current version. i've got latest kp and latest CSSU test installed. :(

cannot see any traffic at all being captured by yamas (https or otherwise).

i am also using bleeding edge drivers.

droll 2012-12-15 13:33

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
downgraded to nmap 5.50
fixed the sh 1: unknown error
upgraded ettercap to a newer version (iirc it was released last week)

yamas works well now.

rpjitendra 2012-12-15 19:19

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Using wlan0 as interface

We will target the whole network as default. You can discover hosts and enter IP(s) manually by entering D.
Press enter to default.


Targeting the whole network on on wlan0
[-] Arp cache poisoning is launched. Keep new window(s) running.

Attack should be running smooth, enjoy.



Attack is running. You can :
1. Rescan network.
2. Add a target (useless if targeting whole network).
3. Display ASCII correspondence table.
4. Real-time parsing...
5. Quit properly.

Enter the number of the desired option.


what to do now ?

Saturn 2012-12-15 23:41

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by droll (Post 1304803)
downgraded to nmap 5.50
fixed the sh 1: unknown error
upgraded ettercap to a newer version (iirc it was released last week)

yamas works well now.

It has been already a year since I have contacted the maintainer of nmap about his broken package and he promised to fix it, but nothing has moved since.

@all please don't use the nmap version in devel or testing it is broken!!

rpjitendra 2012-12-19 16:17

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
need help.
installed yamas and all needed Dependencies.
its not working.
a password windows appears just after of asrproof window.

panjgoori 2013-05-19 05:16

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
can anyone add wget into Yamas's dependencies list ? Without wget Yamas will not run and exit itseld after checking for dependencies. Thanks.

Saturn 2013-05-19 18:39

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Version 1.0.1 was just sent to devel.

Removed the in-application check of dependencies.
I think it is better to leave the check of the dependencies to the OS.

PS: wget was wrongly in the check.

panjgoori 2013-05-19 19:22

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by Saturn (Post 1344864)
Version 1.0.1 was just sent to devel.

Removed the in-application check of dependencies.
I think it is better to leave the check of the dependencies to the OS.

PS: wget was wrongly in the check.

thanks for the update.

rpjitendra 2013-07-08 09:00

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
apt-get install yamas--
after this operation, 131kB of additional disk space will be used.
Err http://repository.maemo.org fremantle-1.3/free yamas 1.0.0-1
404 Not Found
Failed to fetch http://repository.maemo.org/extras-d....0-1_armel.deb 404 Not Found
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

HAM - application package not found
help please

vforever3 2014-12-05 11:53

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Hi plz help me
I just download any app usin apt-get install dis error plz anyone help me
E: could not get lock /var/lib/dpkg/lock - open (11 resources temporarily unvailable)
E: unable to lock the administration directory (/var/lib/dpkg/) is another process using it?
Plz plz help me for solve this

F1R0Z 2015-02-17 16:50

ERROR Yamas
 
I have been having problems with the latest version 1.0.1

the error is
sh : 1 : unknown operand

I have tried every possible way to correct it

i have tried using the older version which uses ettercap instead of arpspoof with both kernel power 53 and 49 but for some reason it doesnt capture anything

i have tried the latest version and getting the operand error even though the script is fixed

i have tried removing and reinstalling iptables/kernel/sslstrip but had no luck

i have even flashed my n900 for 4 times in a row now (full flash including EMMC)

I dont know what to do anyone please help

jberezhnoy 2015-02-18 11:07

Re: ERROR Yamas
 
I've successfully installed yamas on a clean device last week.
What has been done:
1) update device to the latest available firmware (OTA works)
2) you need to enable extras-devel repositories to install all required dependencies, here is the how-to-do this https://wiki.maemo.org/Extras
3) install power-kernel (probably the latest one). I've done this from Faster Application Manager.
4) install patched wifi driver. This can be done from Faster Application Manager - install .
E.g. you can install Wlan Driver Selector Applet
http://talk.maemo.org/showthread.php?t=73682

5) if you install power-kernel - you need to reboot device and apply custom kernel settings


After that try to install yamas from the repositories or from Faster Application manager, both methods shall install all required dependencies automatically.

jberezhnoy 2015-02-18 11:14

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by vforever3 (Post 1450769)
Hi plz help me
I just download any app usin apt-get install dis error plz anyone help me
E: could not get lock /var/lib/dpkg/lock - open (11 resources temporarily unvailable)
E: unable to lock the administration directory (/var/lib/dpkg/) is another process using it?
Plz plz help me for solve this

try to reboot device, open terminal, get root and then apt-get install *** whatever you need

This error can be occur if you have opened package manager software, which locks the administration directory, and simultaneously trying to use apt-get.
Also you may have unconfigured packages in the system [e.g. if some packages were not completely set up]. In this case you may try to configure them from terminal [root]:
dpkg --configure ***

jberezhnoy 2015-02-18 11:15

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by rpjitendra (Post 1357607)
apt-get install yamas--
after this operation, 131kB of additional disk space will be used.
Err http://repository.maemo.org fremantle-1.3/free yamas 1.0.0-1
404 Not Found
Failed to fetch http://repository.maemo.org/extras-d....0-1_armel.deb 404 Not Found
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

HAM - application package not found
help please

you need to enable extras-devel repositories to install all required dependencies, here is the how-to-do this https://wiki.maemo.org/Extras

peterleinchen 2015-02-19 06:45

Re: ERROR Yamas
 
Quote:

Originally Posted by jberezhnoy (Post 1461122)
...
1) update device to the latest available firmware (OTA works)
...

Are you sure?
I would be really surprised if that still works. :confused:

F1R0Z 2015-02-22 09:43

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
1 Attachment(s)
here is the script
please can anyone tell me whats wrong with it??

i am getting operand error

with iptables buh i believe that there is a syntax error buh i cant figure it out as i dont knw bash scripting i am noob

can anyone please help?

jellyroll 2015-02-22 12:15

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by F1R0Z (Post 1461653)
here is the script
please can anyone tell me whats wrong with it??

i am getting operand error

with iptables buh i believe that there is a syntax error buh i cant figure it out as i dont knw bash scripting i am noob

can anyone please help?

You should try the Android version of YAMAS on a Debian chroot image.

F1R0Z 2015-05-31 22:56

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
Quote:

Originally Posted by jellyroll (Post 1461667)
You should try the Android version of YAMAS on a Debian chroot image.

Thank you for your reply and sorry for my late post

I did tried running the Android version on debian chroot but had some dependencies missing and threw some other errors. the one i could not fix was that it depends on busybox-power which i do have installed on n900 but not in the debian environment.

so what i did was i downloaded the source for yamas (n900 version), installed the dependencies, i still had the problem with the busybox error buh this time instead of installing yamas i just ran the script and it works like a charm

even though i have had my n900 flashed for quite a few times now i still get the operand error, i remember some one here suggesting it was something to do with the bracket syntax in the script, after trying many times i could not figure it out. Buh the above solution works for me now so i dont care about the operand error any more.

thanks jellyroll for pointing me to the right direction

jellyroll 2015-06-01 20:12

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
1 Attachment(s)
I think you're using a wrong script. Check the following webpage to read the Yamas scripts that where made for Android, Backtrack and Maemo. http://comax.fr/yamas.php
You might also need to disable some firewall configurations on Maemo before loading the Yamas script.

panjgoori 2015-08-14 14:45

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 
does anyone have any plans to upgrade YAMAS to latest version released ?? which supports image sniffing.


All times are GMT. The time now is 10:01.

vBulletin® Version 3.8.8