maemo.org - Talk - [Announce] Yet another MITM attack script (Yamas-ARM)

maemo.org - Talk (https://talk.maemo.org/index.php)

- Applications (https://talk.maemo.org/forumdisplay.php?f=41)

- - [Announce] Yet another MITM attack script (Yamas-ARM) (https://talk.maemo.org/showthread.php?t=73988)

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Quote:

Originally Posted by kuentin (Post 1029619)

I had the same problem with /tmp/yamas.txt or whatever I chosen as the filename to save the log.

After install the packages python-twisted-web python-openssl , and reinstall sslstrip the problem dissapears and I was able to manage the mitm with my n82, getting the passwords flawessly.

Thanks for this script, will test it further and report here.

that worked a treat many thanks ..

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Quote:

Originally Posted by kuentin (Post 1029619)

Oh boy... Since I thought this was being used on Backtrack, I never thought you would miss such dependencies. They are in deed needed !

Quote:

Originally Posted by mr_pingu (Post 1029646)

Maemo is the OS that runs on our phones, basically it is a debian distribution which is heavily modified for small screen, still the core is the same, like apt-get and default we got a ash shell (busybox 1.18)

We can install bash by issuing apt-get install bash, but I don't fully understand bash and busybox together. I can type bash in busybox and I get a bash shell but then when I want to gain root it flips back to busybox (ash)

All right ! Thanks for the light ! Maybe I should add some bits of code to check for the needed dependencies...

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Script is run as follows in terminal:
bash mitm_pcsci3nce.sh

Moreover, I have given a link with instructions for installing ettercap and sslstrip in the main post for a reason.

Once again, the script works under maemo. Most people have problems either because of lacking dependencies or because of wrong installations of those dependencies.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Quote:

Originally Posted by comaX (Post 1029763)

Oh boy... Since I thought this was being used on Backtrack, I never thought you would miss such dependencies. They are in deed needed !

All right ! Thanks for the light ! Maybe I should add some bits of code to check for the needed dependencies...

All working great here thanks,although I do have quite alot install previously Koodos :)

Heres what I see as a dependancy list for all.

ettercap
sslstrip-0.9
python-scapy
libpcap0.8
nmap
iptables
iproute
xterm
python-twisted-web
python-openssl

All are in repos apart from sslstrip and ettercap which the download link is in this thread somewhere. Simply put in xterm

Code:

sudo apt-get install python-scapy libpcap0.8 nmap iptables iproute xterm python-twisted-web python-openssl

Also if you are unsure have a look at karams hacking tutorial it covers most things needed to get you going.
http://talk.maemo.org/showthread.php?t=73572

Seems like some people in here are either
1)Not running as sudo bash /script/location

2)Not capable of editing a script to get rid of read errors. It tells you the line its on. Just use a txt editor like vim and find that line rm the -e part of the line simples.

3)Just plain lazy and simply install everything on here without knowing what it really is or indeed how to use it. Google is you best friend.:)

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Thanks for the list @casper27. I am running the script on my phone, but I had most of the stuff pre-installed long time ago. I will fill up the dependency list with the packages you have listed.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Quote:

Originally Posted by Unhuman (Post 1029786)

Thanks for the list @casper27. I am running the script on my phone, but I had most of the stuff pre-installed long time ago. I will fill up the dependency list with the packages you have listed.

Add also libpcre3 (needed for ettercap), bash and busybox-power

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

I am quite sure busybox-power isn't needed. I run the script without it. Cheers.

EDIT

Though I have enhanced-busybox, which I have listed in the dependencies.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Quote:

Originally Posted by Unhuman (Post 1029797)

I am quite sure busybox-power isn't needed. I run the script without it. Cheers.

EDIT

Though I have enhanced-busybox, which I have listed in the dependencies.

Well, it's the same package.

One more thing, libpcap0.8 and libpcre3 should be before ettercap since they are its dependencies.

BTW, I have to say that this together with aircrack-ng you have made a very scary combination! Bravo.

EDIT: I'm not sure, but it might be the case that if you have iproute you don't need busybox-power. The reverse is true since I don't have iproute.

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Is it supposed to show more than one host when it does the scan?

Re: [Announce] Yet another MITM attack script (Yamas-ARM)

Thx for the help :/
srsly, game 7
too many targets :O

-edit-

well FYI it didn't work when I was connected to "free wi-fi" in a place with probably 300 ppl. Does that mean the router has a firewall blocking something this needs to do? I don't know what exactly it's scanning for.
I tried it at home and it works, detects more hosts...