maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   [ announce ] hackattack! (https://talk.maemo.org/showthread.php?t=74081)

vi_ 2011-06-17 19:08

Re: [ announce ] hackattack!
 
Quote:

Originally Posted by Unhuman (Post 1031004)
Google
http://pcsci3nce.info/?p=9
http://pcsci3nce.info/?p=11

As for the script - I haven't had the time to test it yet, however can it NOT be in this green font :X It is ugly :(

oopz, seems I ****ed this one up. Gimme some moments to sort this out.

The green font is just my xterm, obviously it will be in what ever color your xterm font is set to.

However everyone knows green font on black background is the leetestist color!

vi_ 2011-06-17 19:29

Re: [ announce ] hackattack!
 
Okay, I think I uploaded the wrong version. I have just tested this version and it works. It parses passwords, creates the log in /opt/tmp and behaves as normal.

Torpedo, please strip all the links in your posts to pastebin in order to avoid confusion.

If for some reason THIS version does not work, there is something extremely fvcking strange going on here.

install script on first post.

Unhuman 2011-06-17 20:21

Re: [ announce ] hackattack!
 
Downloaded and tested it. Traffic redirecting is working, tail grep shows traffic to sites, however I get no login credentials in the Passwords window. Moreover, links stay https for me for some reason.

Tho I installed and reinstalled like 50 packages today so it might just be my phone. Waiting for someone to confirm/deny.

vi_ 2011-06-17 21:02

Re: [ announce ] hackattack!
 
unhuman are you using busybox-power?

can you report your busybox version?

It could be a problem with stock busybox egrep.

Unhuman 2011-06-17 21:08

Re: [ announce ] hackattack!
 
version 1.18.5

stevomanu 2011-06-17 21:30

Re: [ announce ] hackattack!
 
have downloaded it throu the wget link on first page and im running into this error ??


Code:

sudo: /usr/sbin/ettercap: command not found
this script worked fine

solved i just edited script an took out the s before /bin .. an its now done its job ...

will test abit more but all seems good now many thanks for your work to all involved ..


edit


1 thing i did notice was it doesnt tell you which web site they are from ..

stevomanu 2011-06-17 21:59

Re: [ announce ] hackattack!
 
ooooo i forgot ettercap screen isnt terminating either ...

vi_ 2011-06-17 22:14

Re: [ announce ] hackattack!
 
Quote:

Originally Posted by stevomanu (Post 1031161)
ooooo i forgot ettercap screen isnt terminating either ...

That is because you HAVE to shutdown ettercap maually. i.e. you MUST press q in order for it to re-ARP it's victims. If you dont the network will be foobar till the next arp refresh (could be up to 15 minutes). The original version of this script used arpspoof from dsniff, unhuman changed it to use ettercap, I changed it to NOT blindly kill ettercap. If you can figure out how to send a 'q' keystroke to the ettercap console, let me know.

vi_ 2011-06-17 22:18

Re: [ announce ] hackattack!
 
Quote:

Originally Posted by stevomanu (Post 1031146)
have downloaded it throu the wget link on first page and im running into this error ??


Code:

sudo: /usr/sbin/ettercap: command not found
this script worked fine

solved i just edited script an took out the s before /bin .. an its now done its job ...

will test abit more but all seems good now many thanks for your work to all involved ..


edit


1 thing i did notice was it doesnt tell you which web site they are from ..

That means they are using a token to identify the website field in the site you were on that is not defined in the script. The script catches most of them except some are a bit freaky and do things there own way. This is why you have the option to save the complete log, for further analysis.

I wonder why your version of ettercap is installed to a different directory?

Which version did you install? (link pls)

stevomanu 2011-06-17 23:04

Re: [ announce ] hackattack!
 
i installed ettercap from this post here ..

an it is ettercap NG-0.7.3 ..

cheers


All times are GMT. The time now is 21:24.

vBulletin® Version 3.8.8