maemo.org - Talk - Ettercap

maemo.org - Talk (https://talk.maemo.org/index.php)

- Applications (https://talk.maemo.org/forumdisplay.php?f=41)

- - Ettercap - n900 (https://talk.maemo.org/showthread.php?t=42680)

Re: Ettercap - n900

Hello,

Thank you for ettercap!

I have some question.
I tried sniffering traffic.

Sniff>Unified sniffing wlan0
host>scan for hosts
192.168.1.1 (router, target2)
192.168.1.100 (victim computer, target1)
192.168.1.103 (my ip)
mitm>arp poising
start sniffing

BUT
I see something but not the all traffic.

on victim computer the arp -a gets:
router and my ip mac addr sometimes same sometimes different.

Maybe the mitm attack doesnt work normally?
How can i run it manualy?

Otherway in ettercap from the plugins the chk_poison plugin gets: No poisoning the all :(

Whats the wrong?

Re: Ettercap - n900

I have followed al steps but when i want to start ettercap

X-terminal:
$ sudo gainroot
$ ettercap -G

I get an error about "Ettercap: error while loading shared libraries: libpcap.so.0.8: cannot open shared object file: No such file or directory"

Can anyone please help me? :confused:

Re: Ettercap - n900

bump come on has this thread died?

Re: Ettercap - n900

Ive tried an ARP poison on my home network and once I start the poisoning the target computers are unable to access the internet!
After some googling this is what I found on the ettercap website:
NOTE: if you manage to poison a client, you have to set correct routing table in the kernel specifying the GW. If your routing table is incorrect, the poisoned clients will not be able to navigate the Internet.

how do you set the routing tables?

Re: Ettercap - n900

Hum didn't work for me. The program ran but in ncurses mode the Enter key was not mapped correctly or something.
Then in GTK mode. I scanned for hosts and it only found 2 out of 7. Then when I tried to add them to the Targets lits it made entries named "invalid" and wold not work. Then I put the entries in the Targets list manually and it Said it started Sniffing then I whent to Arp poison -sniff remote connections... and it just didn't do anything. When I ran the plugin check-poison it said "this plugin must be ran during a poising session"

I did this stuff to install it.....
I cba making a .deb, this is a tgz of my /opt/ettercap
So the install process is the following:

* copy tgz to /opt/
* tar xzvf
* now you gota make symlinks to /bin/ for ettercap etterfilter and etterlog, and symlinks to /usr/lib for libnet and libpcre.
ex: ln -s /opt/ettercap/bin/ettercap /bin/ettercap

ln -s /opt/ettercap/lib/libnet.so.1.3.0 /usr/lib/libnet.so.1
and
ln -s /opt/ettercap/lib/libpcre.so.3 /usr/lib/libpcre.so.3

Re: Ettercap - n900

Are people using wlan0?

I tried a unified sniff with wlan0 and got:

Quote:

Originally Posted by ettercap GUI

Interface "wlan0" not supported (802.11 plus BSD radio information header)

Any ideas guys?

**Edit** - Figured out it was because my card was in monitor mode.

Although, this does not help me though as ettercap cannot see wlan0 as an interface if its not in monitor mode - any ideas on that one? TIA

Re: Ettercap - n900

Quote:

Originally Posted by tchouky (Post 501286)

Hi,

I ve successfully compiled Ettercap for my N900.
I have all the options included and pretty much everything seems to work (plugins, PCRE, ncurse & gtk, ...).

The only thing i know of that doesnt is the SSL dissector, which requires valid redirection commands. And since the current kernel doesnt support connection tracking, iptables can't use the NAT table.
So that's some more work... (that i probably wont do :p)

Ive successfully arp spoofed & injected into HTTP streams, using ettercap filters, so it appears to be fine for me.

Here are the binaries:
ec-n900.tgz

I cba making a .deb, this is a tgz of my /opt/ettercap
So the install process is the following:

copy tgz to /opt/
tar xzvf
now you gota make symlinks to /bin/ for ettercap etterfilter and etterlog, and symlinks to /usr/lib for libnet and libpcre.
ex: ln -s /opt/ettercap/bin/ettercap /bin/ettercap

now you can pwn people everywhere :)

Hi,

To ease the installation, I have managed to build ettercap, libltdl3 & libnet as debian packages optified for or loved device :D

You can get it here :

http://bigbob.fun.free.fr/ettercap-c...-1.2_armel.deb
http://bigbob.fun.free.fr/ettercap-g...-1.2_armel.deb
http://bigbob.fun.free.fr/ettercap_0.7.3-1.2_armel.deb
http://bigbob.fun.free.fr/libnet1_1.1.4-2_armel.deb
http://bigbob.fun.free.fr/libltdl3_1...emo1_armel.deb

As usual, as root change to the directory you put the files, and type :

Code:

dpkg -i libnet1_1.1.4-2_armel.deb libltdl3_1.5.26-3maemo1_armel.deb ettercap-common_0.7.3-1.2_armel.deb ettercap_0.7.3-1.2_armel.deb

Activate all repositories in case of dependencies troubles http://www.nokian900applications.com...or-nokia-n900/ and fixe deps with :

Code:

apt-get install missing_deps

Hope it help ...

A++

Re: Ettercap - n900

Quote:

Originally Posted by colin.stephane (Post 852862)

Code:

dpkg -i libnet1_1.1.4-2_armel.deb libltdl3_1.5.26-3maemo1_armel.deb ettercap-common_0.7.3-1.2_armel.deb ettercap_0.7.3-1.2_armel.deb

Activate all repositories in case of dependencies troubles http://www.nokian900applications.com...or-nokia-n900/ and fixe deps with :

Code:

apt-get install missing_deps

Hope it help ...

A++

Thank you for your immence help.Now ettercap is working but Ettercap -G is not working.It says its not compiled.But ettercap gtk as a deb is there in your packages.what might be the problem?

Thank you verymuch

Re: Ettercap - n900

Quote:

Originally Posted by colin.stephane (Post 852862)

Code:

dpkg -i libnet1_1.1.4-2_armel.deb libltdl3_1.5.26-3maemo1_armel.deb ettercap-common_0.7.3-1.2_armel.deb ettercap_0.7.3-1.2_armel.deb

Activate all repositories in case of dependencies troubles http://www.nokian900applications.com...or-nokia-n900/ and fixe deps with :

Code:

apt-get install missing_deps

Hope it help ...

A++

hi! first of all, thanks for all your work!
this is what i get when i run the first command:

Code:

Nokia-N900:/home/user/MyDocs/Downloads/Ettercap# dpkg -i libnet1_1.1.4-2_armel.deb libltdl3_1.5.26-3maemo1_armel.deb ettercap-common_0.7.3-1.2_armel.deb ettercap_0.7.3-1.2_armel.deb 

(Reading database ... 51817 files and directories currently installed.)

Preparing to replace libnet1 1.1.4-2 (using libnet1_1.1.4-2_armel.deb) ...

Unpacking replacement libnet1 ...

Preparing to replace libltdl3 1.5.26-3maemo1 (using libltdl3_1.5.26-3maemo1_armel.deb) ...

Unpacking replacement libltdl3 ...

Preparing to replace ettercap-common 1:0.7.3-1.2 (using ettercap-common_0.7.3-1.2_armel.deb) ...

Unpacking replacement ettercap-common ...

Preparing to replace ettercap 1:0.7.3-1.2 (using ettercap_0.7.3-1.2_armel.deb) ...

Unpacking replacement ettercap ...

Setting up libnet1 (1.1.4-2) ...

Setting up libltdl3 (1.5.26-3maemo1) ...

dpkg: dependency problems prevent configuration of ettercap-common:

 ettercap-common depends on libpcre3 (>= 4.5); however:

  Package libpcre3 is not installed.

dpkg: error processing ettercap-common (--install):

 dependency problems - leaving unconfigured

dpkg: dependency problems prevent configuration of ettercap:

 ettercap depends on libpcap0.8; however:

  Package libpcap0.8 is not installed.

 ettercap depends on libpcre3 (>= 4.5); however:

  Package libpcre3 is not installed.

 ettercap depends on ettercap-common (= 1:0.7.3-1.2); however:

  Package ettercap-common is not configured yet.

dpkg: error processing ettercap (--install):

 dependency problems - leaving unconfigured

Errors were encountered while processing:

 ettercap-common

 ettercap

Nokia-N900:/home/user/MyDocs/Downloads/Ettercap#

...and when i tried the dependencies fix:

Code:

Nokia-N900:/home/user/MyDocs/Downloads/Ettercap# apt-get install missing_deps

Reading package lists... Done

Building dependency tree       

Reading state information... Done

E: Couldn't find package missing_deps

Nokia-N900:/home/user/MyDocs/Downloads/Ettercap#

all the repositories are enabled so it's not that for sure.

thanks in advance for your help

Re: Ettercap - n900

@mariuscm you have to type (as root) apt-get -f install libpcap0.8 libpcre3

had the same problem but now its solved :)