Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

the ettercap check worked yesterday so i reinstalled it an all worked mint .

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

so i should run apt-get install xterm & apt-get install ip ?

root
/usr/bin/mitm.sh

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

i guess thi script is gunna end up something like easy-creds that i use on backtrack5 , have tryed easycreds on n900 some things work but no others ...

thanks for all your work an comitment to this project ...

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

Try this:

apt-get install iproute xterm

It will install those two commands you were missing, xterm and ip.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

Hmm, yes and no ! I created this script precisely because I wasn't satisfied by easy-creds ! The parsing method is very different for one thing, and it doesn't do all the stuff that easy-creds offers, and that I find not useless but... Not fitting for my script. By the way, if you use BT5, you should check out the BT5 version of this script :
http://comax.pagesperso-orange.fr/info/#yamas
The current version is 0.9.1.

if you were saying it will become like EC because I keep adding stuff EC also has, it's only half true, because after dns spoofing, I think I'll be very close to some final version !
And if you say so because some things work and others doesn't, you're plain wrong, cause I'll correct it until it's (almost) perfectly fitting ! =D

Cheers :)

See edit below ;)

Edit : I added ip and xterm to the dependency check, and a second path for ettercap, since it seems it could be installed in two different places according to what install method you used.

If ever you notice e dependency I forgot, or another path to it, don't hesitate to submit it !

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

@AgogData check first post for dependencies. You are missing busybox-power and xterm.

EDIT:

comaX - ip is part of busybox-power. The script should check for ip, but point out that busybox-power isn't installed :)

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

Hi comaX and Unhuman,

One more edit for you to consider.

- The dependencies are checked by dpkg (in my opinion agnostic and more resilient to custom installations).
- the dependency check is done not every time but on request using the -d option. That is,
- made the two "wget" to happen only when needed.
- the home folder is a variable - easier to change
- one small correction: if the root privileges check failed you were stuck with red font - the echo command color was not terminated.

I think that's all. Thanks again.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

Everything seems to work alright for me(no dependency problems, no iptables error etc), but I get this message on my computer so I thought I were protected:

http://i.imgur.com/296gX.png

However, I shut down all protection and still no passwords, neither for HTTP or HTTPS. I run with all default settings. When I do submit a password, there's a brief flicker on the password terminal window, but nothing shows up. Any advice?

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

what is your browser ? It seems you are just protected against this kind of attack !

Satun, I'm not home right now, so I can't check the version you posted. Did you do all the modifications you suggested ?
It seems to me those are good ideas (especially -d, but we should also add a warning message so that people do check for the dependencies before running the script, and coming complain about it not working :p - I'll add a message for that below the banner. Also Unhuman should write it in the 1st post. I'll mail him about that), so I'll have a look but I'll probably just uplaod it as is. And some more credits for you ;)
Thanks !

Edit : finally I found a way to read the text file on the crappy mac i'm on... So everything seems fine, but I'm just not sure using dpkg and grep is more efficient than just a simple existence check.
Why not though...

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

I'm using Firefox 5, maybe I should try internet explorer and see if I'm still protected..