![]() |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
it works but the passwords some times **** giving %20 or %20%40 or %40
scripts says it is space but it is not and also one other error about converting nil2 font or something like that |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
What happens if you press ctrl+c on the ettercap window while it is still open after shutdown? I imagine it SHOULD close after that. What happens if you kill the ettercap process from another xterm window? does it close then? Thanks for the testing dood. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
The nil2 is just an error about some fonts, don't mind it ! |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
@Unhuman
please add this link to the first post http://forums.internettablettalk.com...50&postcount=1 it has more tools than the link you already added also most of the guide that the link you added is grabbed from that thread another also i remember karam maid an update for that thread to remove iw installation guide cause it is not confilicting with aircrack-ng packages anymore the link you already added doesn't made that update and also the link you added has a metasploit guide error check that out |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Oh btw this script is awesome |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
The famous metasploit framework can also be run on the N900 and the instructions + the actual file can be found HERE. Everything works flawlessly and I have successfully
the work HERE has the link http://dev.metasploit.com/redmine/pr...i/Install_N900 which is a dead link PS: THANKS for fast reply |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
@Seker_94
it says that the guide is moved to https://community.rapid7.com/docs/DOC-1295 so it is not a dead link maybe moved link will be better ;) |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
idk it says server not found in my case
is it an isp problem? |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
http://pastebin.com/rmvNSCAR
latest dev version. This does not need xterm or bash to be installed. Install as per unhumans instructions in post #1. Except miss out xterm and bash. All processes are shut down nicely only problem I see with limited testing is the ettercap window doesnt close (after it has been killed). A solution is in the works. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
If I make it executable and launch it without bash (just "./mitm.etc.sh"), it SegFaults (invalid -n option in final function, so the menu goes crazy). Insults are welcome if this is a dumb question ;) |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Please tell me: Are you using busybox power? To test, type busybox from the xterm and tell me your version number. The -n flag on the read command isnt really needed, I just liked not having to press return after each choice. If you are using the stock busybox then we will have to remove the '-n 1' from all the instances of the 'read' command. It is no great loss really. As for ettercap not shutting down, this is a good thing. Ettercap PREFERS to have you quit properly with 'q' button so it can un-ARP everyone (shutdown nicely). With this in mind I am thinking of removing the instances of killall ettercap, forcing the user to shut it down properly. That is of course unless someone can work out how to send a 'q' keystroke to the ettercap window. However I feel that is a stick of dynamite to crack a nut. If all this is the case, then all we need to do is remove the wgets, correct some spelling, slap its *** and send it on its way! tl;dr, stock busybox might not like -n 1 parameter. Please report your version of busybox. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
BTW I can't properly use the script without changing the temp folder: ettercap always stops its activity when the log file exceeds ~930 KB (because /tmp is full). Shouldn't we change the temp folder too? |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Very good point with the moving of the temp folder, we want to minimise read/writes on the NAND (and <1MB is too small). The obvious place is somwhere in /opt. If there is an '/opt/tmp', put it there. If there is not, we will create one. So: 1. remove all instances of '-n 1' 2. check/create for /opt/tmp 3. possibly check if script is being run as root and exit if not. 4. edit some of the wordage for better flow. 5. remove the wgets. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
EDIT: http://pastebin.com/LusgAMpx Just removed the "-n 1" so busybox-power is not needed, and added a little check for being sure it is run as root. Hope that's ok; should I start working on point 2? EDIT2: just noticed that "#" was missing before !/bin/sh, added that too. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
This is my last version of the script:
http://pastebin.com/YGjb7UeE It should create /opt/tmp and operate there, however it still saves the results in /root. I'd like to make it saving the output somewhere else, e.g. /opt/yamas or/MyDocs/Yamas or even MyDocs/.documents/yamas for more user-friendliness; what do you think about it? |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
The results for sure must be moved from /tmp/.. I personally suggest /MyDocs/Yamas/. At the moment /tmp/ limits the file size and at one point the script stops working as some people are reporting.
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
+1 /MyDocs/Yamas
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Also, it would be great to put it into repos, when we'll get N900 optimized version (seems that's few fixes ahead).Unhumans & vi_, maybe You could become maintainers? I think it would be hard for ComaX to maintain it without owning N900. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Quote:
About maintaining, I would still be able to make updates and all (for dsn spoofing for instance, and other features I have in mind). But I would surely need you guys to help. After all, except from a few things here and there, it's not much different ! For now, I'll be waiting on _vi and torpedo version, then review it, change what I feel should be changed (shouldn't be much though !). And when it's ready, I'll upload it to Unhuman's blog (pcsci3nce.info). I'm glad you guys like it and work that much on it ! Cheers :) |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
I have made a first release, final copy of my modifications of yamas. If there are no obvious bugs then this is as far as I go. Feel free to do with it as you wish. comaX: add the terms 'Email' and 'Passwd' to your list of things to grep for! |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
1 Attachment(s)
What is this?
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
No idea about this issue. Does ti happen every time?
I will update the script in the first post to /MyDocs/Yamas so that it doesn't suddenly stop when it reaches 1MB. Please test it in a few minutes. EDIT: Try it out http://pcsci3nce.info/files/mitm_pcsci3nce.sh |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
let me know when is done pls
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
my script is working mint what new in the udate you just posted is it worth my updating ???
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Its very nice that You're so involved in creating N900 optimized version of Your script, without even possessing N900 - for that, I'm very thankful. Anyway, I'm little confused about current "upstream" version for N900 - on first post is it vi_ modified, or another one? AFAIK You guys don't try to achieve different things, so producing 2 different versions in parallel would be counter productive IMO. Especially, that comaX would like to provide updates and overall check script for any possible mistakes - I think it's much better to show him one version, that incorporate both Unhuman and vi_ work (and other people as well if someone else contribute). /Estel |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
I just fixed a small 'glitch' with the place files are saved. I haven't changed anything else. I've been having issues with vi's current script for some reason. Anyway, comaX seems to be away from a PC these days so we just have to wait.
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Can you tell us what exactly are these issues? Maybe vi_ or other experienced one will help fixing it? Less work for comaX.
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
no is workin just fine for me, i do get the "data" but the victim ca not see the emails ( i got a test acount on yahoo) and after imputing the login data i get BAD REQUEST on the website. this is normal? ore the victim should be able to continu to read the email...
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Depends on how the particular site handles multiple logins really.
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Quote:
The available version should be patched so that users are no longer limited to the 1Mb in /tmp/ directory, but I didn't check yet, and I need to get some sleep before doing that ! So, again, tomorrow or tuesday :p But, it doesn't contain anything _vi has done so far, since I couldn't check what he has done. I also think it's a bit counter-productive to have two parallel scripts, but if he wishes to do that, I'm fine with it ! Maybe what he should do is ask Unhuman to make him an author on pcsci3ence.info so that he can work directly on the available version. Then we would just increment a version file containing changelog so that we (authors) know what has been done by the others. Just speculating here, you guys do whatever you want ! In deed I intend to make updates, add features and all, so it would be better to have only one version, but again, I don't give much of a fcuk =D I'll maintain and update my version and the N900's, anyone who wants to participate is very welcomed and that's about it ! I'll post again when I will have reviewed all versions (_vi, current one, and ones I was sent...) Meanwhile, keep up the good work guys ! Cheers ! |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
right just wandering is the script on first page the newist version as i see a lot of pastebin links about so which is best working version >??##
many thanks |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
The version torpedo and I worked on addresses all the issues that have been raised about running this thing on the n900. You will be unable to include the changes into your 'master' version 'upstream' as It has not really been written in a 'portable' fashion. As far as I am concerned the version I have 'fixed' as linked to in the other thread is the only version worth even attempting to run on an n900. The version in this thread is plain broken and was untested on release. Concerning future development, that is all up to you bromaX. I have 'scratched my itch', created a working version. I have even provided a paste n' script psuedo installer. What you guys now do with this is up to you. Despite the fact this makes stealing secured passwords so easy my mother could do it some people are still managing to ****itup. This fact concerns me. This script is the equivalent of giving an AK47 to a mal-balanced child. (but there again, i feel guilty when using aircrack. Do I understand the weakness in the WEP implementation of the RC4 cipher enough to feel legitimate enough to use aircrack? - where TF am I going with this??) tl;dr; I have nothing more to contribute to YAMAS. My pastebin link will expire in 28 days. This version sucks, use the one in the other thread. Don't actually ever use this script, if you do it is nothing to do with me. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
|
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
Up to you to find where is the problem. By the way, according to your next post, I might warn moderators about some people's work being stolen. Me not giving a damn about the code itself, doesn't mean the name isn't mine. Please change it so people don't make association between your shitty perfect stuff and mine. Also, since a script is pretty much a wrap up of some other stuff, I don't mind anyone learnin, copying from it. The parsing method is mine though, and I worked my arse off on this one. If you wish to continue with "your" script, please remove the parsing I wrote. The other stuff are free for you to use though. Cheers ! #### Quote:
Having a social life, and friends to meet, I don't spend my whole time reading scripts (don't take that personnaly at all, it's meant for the arshole above) and modifying mine. Tonight, or tomorrow, according on what I'm planning on doing tonight, I'll make substantial modifications with what you guys submitted =D If you are ready to install some dependencies that we should get rid of in the next release, then do, the script is functionnal. And if you experience troubles, just report, and I'll do my best along with the other members ! |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
1. YAMAS belongs to COMAX, in every respect. The credits are the same, the name is the same COMAX WROTE IT. Nobody has stolen anything and to say otherwise is preposterous. 2. The version posted here ITT is broken for the N900 when first posted and is still broken for the N900. This is NO reflection upon the quality of the original which runs perfectly fine on a 'normal' linux computer. ComaX, if you want confirmation of this, go and read the source of the 'modified' version. It is still yours, just tweaked to run on an n900. 3. Generally, scripts don't go into the repository as individual entities. To suggest they do is as Ludacris as the SCUD battery box. 4. When I am saying 'don't run this'. I mean DONT ARP SPOOF some network you have no right to be on and steal some ones passwords. I can only assume English is not your first language and therefore accept that you may have mis-read what is being said. Thusly I won't take offence. |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Wow, i didnt expect that VI. I am English and come from England, and even I read your post different to how your most recent one has put it. Its a shame you no longer want to work on it, however can I take this time to thankyou for your input up to now in making the script better.
Also a massive thanks to ComaX, unhuman and torpedo48. The original script works fine for me however I support the act of cleaning it up, making it use less dependancies and making it 'designed' for the n900 - I just wish I had the knowledge to help you guys code it ;) |
Re: [Announce] Yet another MITM attack script (Yamas-ARM)
Quote:
it would be so much better if you all worked in this more heads is always better but you need to get on an agree that is forthe benifit of this script an people using it no point in pointing fingers really work with each other .. many thanks to all who have helped out so far keep it up please .. |
All times are GMT. The time now is 09:49. |
vBulletin® Version 3.8.8