Results 1 to 3 of 3

Thread: Problems with ettercap filters

  1. #1
    Good friend of the forums
    Join Date
    Jun 2008
    Posts
    425

    Default Problems with ettercap filters

    Hi
    I'm trying to write a filter that replaces <a href= with <a h_r_e_f="192.168.6.1">Link</a>

    This is the code I have tryed
    if (ip.proto == TCP && ip.src == 80) {
    replace("<a h_r_e_f=", "<a h_r_e_f="h_t_t_p:/_/_192.168.6.1/index.html </a>");
    msg("filter\n");
    }

    When I run ettercap -T -q -F http.ef -M ARP // // -P autoadd
    it runs ok, and when I kvm over to a windows box with IE and goto site the pages load like normal, but back on the linux box it shows alot of msgs(filter)

    I've also tryed inject() the above index.html file.

    Thanks
    James

  2. #2
    Senior Member
    Join Date
    Apr 2008
    Posts
    2,008

    Default

    You might want to check out this thread: http://forum.remote-exploit.org/show...hlight=patched
    -Monkeys are like nature's humans.

  3. #3
    Good friend of the forums
    Join Date
    Jun 2008
    Posts
    425

    Default

    I tryed what that link said quotaing it, but it still doesn't work. I have tryed to work out what was wrong, and I think it is with the arp posioning. When I try a tracert on the box that is arped it goes directly to my router then to google. I thought that it would show the linux box its meant to get redirected through.
    My router is a level one wbr-3400tx if that helps.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •