maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   General (https://talk.maemo.org/forumdisplay.php?f=7)
-   -   Has anyone done a succsesful MITM attack witn N900?? (https://talk.maemo.org/showthread.php?t=80949)

akitta 2011-12-17 23:21

Has anyone done a succsesful MITM attack witn N900??
 
I was testing my N900, and decided to attempt a MITM attack at my girlfriends house...(With her full blessing of cause :rolleyes: )
Anyway I've tried before at home (on myself) and both times it just crashes the network, the targets stay connected but the page never loads.
I've tried using .Ettercap (-t) and (-G). .Arpspoof+Sslstrip.
It's not the networks as i've done the same attack using BT5 on my laptop, and everything works fine. I have etter.conf edited for iptables.
I was just wondering if anyone as ever actually done an attack with the N900, i think the device (as much as i love my N900) is to slow to do a realistic MITM attack in the real world..!!

pulketo 2011-12-19 16:59

Re: Has anyone done a succsesful MITM attack witn N900??
 
Yes, with YAMAS...i could hack into my own network and see my facebook password in plain text

akitta 2011-12-19 19:14

Re: Has anyone done a succsesful MITM attack witn N900??
 
I downloaded YAMAS, but it uses sslstrip (if i remember correctly) and ettercap. so i should be able to do it manually using command-line. Maybe I'm wrong. I'll look at it again. Thanx 4 The reply..!

akitta 2011-12-21 13:23

Re: Has anyone done a succsesful MITM attack witn N900??
 
i done a MITM attack, last night and it worked perfectly. I used ettercap GTK. still slows network down to a crawl when using 'arpspoof'. I wish ettercap didn't throw up certificates.

comaX 2012-01-25 20:26

Re: Has anyone done a succsesful MITM attack witn N900??
 
Quote:

Originally Posted by akitta (Post 1140378)
i done a MITM attack, last night and it worked perfectly. I used ettercap GTK. still slows network down to a crawl when using 'arpspoof'. I wish ettercap didn't throw up certificates.

You can set Ettercap so it doesn't use the SSL downgrade stuff, aka "throw up certs". Look the command I use in Yamas, and you'll have it sorted out !
(sorry, I don't remember it... I'm not much of an Ettercap fan)


All times are GMT. The time now is 14:59.

vBulletin® Version 3.8.8