View Single Post
Posts: 83 | Thanked: 142 times | Joined on Jun 2011 @ Paris, France
#415
i guess comax have to add dns spoof in the yamas script. in the new yamas there wasnt any option. even if there is..would be kind enough to point it out sir?
No, there is no DNS spoofing ; not that it couldn't be done, but I don't think it's fit for a mobile phone... The RealTime Parsing is already quite CPU consuming. Since the dsniff package is installed, nothing stops you from doing it yourself while running Yamas though.
So, no I don't *have to* add or do anything. Now, I can have a talk with Unhuman and Saturn to see if we think it's appropriate. I don't own the phone, but I don't think it is. If you want to dns spoof, learn the man, it's really easy.
"man dnsspoof".

I don't mean to be an as*s guys, but if you want to play hackers, you gotta act like one. And that means learning what is going on, why, and doing a lot of research. I didn't write this script out of nowhere, I spent sleepless nights trying to figure out how this sh*it works. The parsing was a real pain in the as**s too.

So, I'll never refuse to help anyone, as long as they show they've done some work too. Otherwise, I get suspisious and I start thinking you only want to play 3v17 HaXX0rs. I can't stress this enough, this IS intended for learning purposes.
Now, what you do with it is your sole business, but I won't help you do illegal stuff. Mind that I myself never used it in an illegal way. Ok, I snooped on my sister's connection, got her FB pass and all. Big deal. But I never used it in a public place whatsoever.

In a nutshell, I'm very -and I mean it- grateful for all the feedback, the appreciation, the suggestions and mostly for the support you guys provide. I feel I didn't do this for nothing. But on the other hand, I'm no security expert, and I'm not entitled to do anything for anyone.

Ah, I really sound like an as*s. Sorry :s

@Karam : same goes for driftnet and urlsnarf (fitting-wise only). Moreover, it's -imo-fu*cking useless. I added driftnet on the PC version because it's kind of fun, and people over at BT forums asked for it. But, it is useless... Unless you're trying to monitor some employee that likes saucy websites, that is. But you won't do that with your mobile phone, will you ? See, the thing I fear is that it will be easier to snoop on someone's FB pass AND FB photos. Because that really is the only use I can fathom from using it on a handled device. By the way, there is better than driftnet, check the BT version of Yamas Urlsnarf, I've been asked only one time, and after testing it... My conclusions are that it's pure horse sh*it. If you want the browsed websites, read through the complete log, or launch in a new console : "cat yamas.log | grep HOST", and that should do it.
Thanks for dsniff, it sounds like it's much efficient with arpspoof on the mobile phone.

Now if you people, REALLY want that (driftnet, dns spoofing, urlsnarf, etc.)... We can make that happen, but keep in mind that it's just a mobile phone.

@knypek3 : Yeahp, normal. You should try to learn how ARP works If you do but fail to understand, send a PM or mail, and I'll try to explain

Edit : wow, I got censored as fu*ck. Sorry for being French
__________________
http://comax.fr/
"I like to dissect girls. Did you know I am utterly insane ?"

Last edited by comaX; 2012-02-09 at 09:33.
 

The Following 9 Users Say Thank You to comaX For This Useful Post: