Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

Pretty sure you don't have busybox-power installed.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

i have busybox-power installed!

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

It's weird that you had any output, since it's in busybox...
bipinbn has the right output though...

Are you guys trying this on your own network ? Did you saved the whole log file and searched for the credentials you submitted ?

Copy all the output to a pastebin so that we know what's going on. Make it disappear after one or two days, it would look bad if people found them while just searching for yamas :p

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

yes i'm trying on my own network and my own account :)
i'm quite a noob, do you mean the output saved on /home/user/.yamas/ ?

i've attached my output. i hope it can help to solve my problem. I would love to try this script ;)

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

what do you think about a bad installation of sslstrip or of ettercap?

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

Might be... But I talked it over with Unhuman for a quite a longtime this afternoon, and our conclusion was : "well, ****, we don't know what's going on for those dudes."

i'll have a look at your file and report ;)

EDIT : the file was just fine, something must have f*cked up during the parsing...

And it fails for some reason, check that you have /tmp/grepcred.txt and that it's not empty. For some reason, it happens to me from time to time... Maybe my host provider doesn't like too much requests at the same time...

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

For malicious people the username and pass that i've used for the test are fake ;) don't spend time to try it.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

here is my grep output i can't see any -a option.. may be this the error?

BusyBox v1.18.5 (Debian 1.18.5power1) built-in shell (ash)
Enter 'help' for a list of built-in commands.

~ $ sudo gainroot
Root shell enabled


BusyBox v1.18.5 (Debian 1.18.5power1) built-in shell (ash)
Enter 'help' for a list of built-in commands.

/home/user # egrep
BusyBox v1.18.5 (Debian 1.18.5power1) multi-call binary.

No help available.

/home/user # grep
BusyBox v1.18.5 (Debian 1.18.5power1) multi-call binary.

Usage: grep [-HhnlLoqvsriwFE] [-m N] [-A/B/C N] PATTERN/-e PATTERN.../-f FILE [FILE]...

Search for PATTERN in FILEs (or stdin)

Options:
-H Add 'filename:' prefix
-h Do not add 'filename:' prefix
-n Add 'line_no:' prefix
-l Show only names of files that match
-L Show only names of files that don't match
-c Show only count of matching lines
-o Show only the matching part of line
-q Quiet. Return 0 if PATTERN is found, 1 otherwise
-v Select non-matching lines
-s Suppress open and read errors
-r Recurse
-i Ignore case
-w Match whole words only
-F PATTERN is a literal (not regexp)
-E PATTERN is an extended regexp
-m N Match up to N times per file
-A N Print N lines of trailing context
-B N Print N lines of leading context
-C N Same as '-A N -B N'
-e PTRN Pattern to match
-f FILE Read pattern from file

/home/user #

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

Missing dependancy
ettercap-common
Should probably remove.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)
 

For info..

New version in devel (0.9.4-1) with changes that comaX sent me.

changelog:
* Added option -d to force dependencies check.
* Dependency check will be run automatically unless it has been a success at least once.
* Corrected urls of files to download.
* Protected some tests better.
* Changed log storage folder to /home/user/yamas

Some other info from me:

- we avoid the MyDocs folder to store logs as it is not always available, e.g. when in mass storage mode.
- previous version is broken since I messed the urls to download the grepcred.txt file (sorry guys my fault completely).
Proposal to comaX: we could add the two files needing download in the package and provide updates on them with new distributions.
- the ettercap-common is a dependency (as is sslstrip) but the repos don't have a version atm. Have moved it to the proposed packages.