Ettercap - n900
 

Hi,

I ve successfully compiled Ettercap for my N900.
I have all the options included and pretty much everything seems to work (plugins, PCRE, ncurse & gtk, ...).

The only thing i know of that doesnt is the SSL dissector, which requires valid redirection commands. And since the current kernel doesnt support connection tracking, iptables can't use the NAT table.
So that's some more work... (that i probably wont do :p)

Ive successfully arp spoofed & injected into HTTP streams, using ettercap filters, so it appears to be fine for me.

Here are the binaries:
ec-n900.tgz

I cba making a .deb, this is a tgz of my /opt/ettercap
So the install process is the following:

• copy tgz to /opt/
• tar xzvf
• now you gota make symlinks to /bin/ for ettercap etterfilter and etterlog, and symlinks to /usr/lib for libnet and libpcre.
  ex: ln -s /opt/ettercap/bin/ettercap /bin/ettercap

now you can pwn people everywhere :)

Re: Ettercap - n900
 

I've hit you up on Twitter. We've got stuff to talk about :D

Thanks for advising me. I'm gonna re-build my enviro and find out what the hell was wrong with my packages since it wouldn't build in DNS dissecting and arpspoofing wasn't actually sending any data out.

Re: Ettercap - n900
 

Ettercap, what a nastily brilliant "tool."

:D

Re: Ettercap - n900
 

I get a error about libnet.so.1. Says no such file or dir. ....
I made ln -s /opt/ettercap/lib/libnet.so.1.0.3 /usr/lib/libnet.so.1.0.3

What did i do wrong ?

Re: Ettercap - n900
 

Just for anyone else who had the same problem:
There are two files that need linking, so open up x-term and type:
ln -s /opt/ettercap/lib/libnet.so.1.3.0 /usr/lib/libnet.so.1
and
ln -s /opt/ettercap/lib/libpcre.so.3 /usr/lib/libpcre.so.3

Ettercap can be run with gui by running:
ettercap -G

If you get a permission error then: chmod 777 /opt/ettercap/bin/ettercap

Re: Ettercap - n900
 

works like a charm, awesome!

Re: Ettercap - n900
 

Ummm what does this app do?

Re: Ettercap - n900
 

http://ettercap.sourceforge.net/

It hints how important it would be to have software packages GPG signed. DEBs are not.

Re: Ettercap - n900
 

i can get this to work for some reason...when i type ettercap it says 'command not found'

Re: Ettercap - n900
 

Thank you!!!!!!! It works perfect.
Pleaseeeee, could you make a guide for metasploit????

Re: Ettercap - n900
 

Hello,

Thank you for ettercap!

I have some question.
I tried sniffering traffic.

Sniff>Unified sniffing wlan0
host>scan for hosts
192.168.1.1 (router, target2)
192.168.1.100 (victim computer, target1)
192.168.1.103 (my ip)
mitm>arp poising
start sniffing

BUT
I see something but not the all traffic.

on victim computer the arp -a gets:
router and my ip mac addr sometimes same sometimes different.

Maybe the mitm attack doesnt work normally?
How can i run it manualy?

Otherway in ettercap from the plugins the chk_poison plugin gets: No poisoning the all :(

Whats the wrong?

Re: Ettercap - n900
 

I have followed al steps but when i want to start ettercap

X-terminal:
$ sudo gainroot
$ ettercap -G

I get an error about "Ettercap: error while loading shared libraries: libpcap.so.0.8: cannot open shared object file: No such file or directory"

Can anyone please help me? :confused:

Re: Ettercap - n900
 

bump come on has this thread died?

Re: Ettercap - n900
 

Ive tried an ARP poison on my home network and once I start the poisoning the target computers are unable to access the internet!
After some googling this is what I found on the ettercap website:
NOTE: if you manage to poison a client, you have to set correct routing table in the kernel specifying the GW. If your routing table is incorrect, the poisoned clients will not be able to navigate the Internet.

how do you set the routing tables?

Re: Ettercap - n900
 

Hum didn't work for me. The program ran but in ncurses mode the Enter key was not mapped correctly or something.
Then in GTK mode. I scanned for hosts and it only found 2 out of 7. Then when I tried to add them to the Targets lits it made entries named "invalid" and wold not work. Then I put the entries in the Targets list manually and it Said it started Sniffing then I whent to Arp poison -sniff remote connections... and it just didn't do anything. When I ran the plugin check-poison it said "this plugin must be ran during a poising session"

I did this stuff to install it.....
I cba making a .deb, this is a tgz of my /opt/ettercap
So the install process is the following:

* copy tgz to /opt/
* tar xzvf
* now you gota make symlinks to /bin/ for ettercap etterfilter and etterlog, and symlinks to /usr/lib for libnet and libpcre.
ex: ln -s /opt/ettercap/bin/ettercap /bin/ettercap


ln -s /opt/ettercap/lib/libnet.so.1.3.0 /usr/lib/libnet.so.1
and
ln -s /opt/ettercap/lib/libpcre.so.3 /usr/lib/libpcre.so.3

Re: Ettercap - n900
 

Are people using wlan0?

I tried a unified sniff with wlan0 and got:

Any ideas guys?

**Edit** - Figured out it was because my card was in monitor mode.

Although, this does not help me though as ettercap cannot see wlan0 as an interface if its not in monitor mode - any ideas on that one? TIA

Re: Ettercap - n900
 

Hi,

To ease the installation, I have managed to build ettercap, libltdl3 & libnet as debian packages optified for or loved device :D

You can get it here :

http://bigbob.fun.free.fr/ettercap-c...-1.2_armel.deb
http://bigbob.fun.free.fr/ettercap-g...-1.2_armel.deb
http://bigbob.fun.free.fr/ettercap_0.7.3-1.2_armel.deb
http://bigbob.fun.free.fr/libnet1_1.1.4-2_armel.deb
http://bigbob.fun.free.fr/libltdl3_1...emo1_armel.deb

As usual, as root change to the directory you put the files, and type :

Activate all repositories in case of dependencies troubles http://www.nokian900applications.com...or-nokia-n900/ and fixe deps with :

Hope it help ...

A++

Re: Ettercap - n900
 

Thank you for your immence help.Now ettercap is working but Ettercap -G is not working.It says its not compiled.But ettercap gtk as a deb is there in your packages.what might be the problem?

Thank you verymuch

Re: Ettercap - n900
 

hi! first of all, thanks for all your work!
this is what i get when i run the first command:...and when i tried the dependencies fix:all the repositories are enabled so it's not that for sure.

thanks in advance for your help

Re: Ettercap - n900
 

@mariuscm you have to type (as root) apt-get -f install libpcap0.8 libpcre3

had the same problem but now its solved :)

Re: Ettercap - n900
 

Is anyone else having problems with arp spoofing? Even the simplest arp spoof (no iptables) with target1=router target2= only 1 client, fails like 2 out of 3 times. The client loses connectivity and gets 'no internet access'error in windows.

Re: Ettercap - n900
 

when i run ettercap -G

/home/user # ettercap -G
/bin/sh: ettercap: not found

I extracted to /opt/ and symlinked as said
what could be the problem

Re: Ettercap - n900
 

This worked for me
If you want to get the gui working you should also do “dpkg -i ettercap-gtk_0.7.3-1.2.armel.deb

Re: Ettercap - n900
 

I'm trying this method, but I keep getting dependency errors:
libpcap doesn't seem to be in the repos, and trying to install a copy from the net works, but throws up more dependency errros (libc6) which causes apt-get refusing to install any package.
Any hints?