Sniffer?

[Slimmay]

Hey,

I'm a Backtrack noob and I was just wondering if there is a way to view what my other laptop is doing (like what webpage). I have 2 laptops, a windows and a Backtrack OS. So, is this possible? Already searched the tutorials.

Thanks!

[imported_=Tron=]

Hey,

I'm a Backtrack noob and I was just wondering if there is a way to view what my other laptop is doing (like what webpage). I have 2 laptops, a windows and a Backtrack OS. So, is this possible? Already searched the tutorials.

Thanks!

There are several applications included in BT3 that will allow you to view another computers online activities using different methods. What exactly is it that you want to achieve?

One approach would be to implement a MITM attack using ettercap and alongside this run urlsniffer, msgsnarf and mailsnarf. This would allow you to intercept the URLs viewed by the other computer, sent/received e-mails and instant messenger conversations.

[Slimmay]

I'm not really trying to achieve anything, just trying to learn more about Backtrack.

[imported_=Tron=]

I'm not really trying to achieve anything, just trying to learn more about Backtrack.

What I'm asking is what kind of information it is that you wish to intercept/sniff?

[Slimmay]

Oh, well mainly just to see that my other laptop is on google. so urlsnarf then?

Ok I've tried ettercap and its having small problems, as in it wont show host list or scan for hosts etc...

Can someone please give me a nice tutorial on how to see my other laptop's url searches?

thank you all very much!!

[Thorn]

You might want to start by learning packet capture first, since most other tools are built on that. Wireshark is the preferred tool for basic packet capture and analysis.

[imported_=Tron=]

Can someone please give me a nice tutorial on how to see my other laptop's url searches?

thank you all very much!!

Using the following commands should successfully implement a MITM attack using ettercap and start urlsnarf on the same interface. However you should seriously consider Thorn's advice as you will not learn anything by simply executing commands without understanding them or the principles of how the program works. Wireshark is a rather user friendly packet sniffer that will help you understand the basics of wired/wireless sniffing.

ettercap –Tq –M ARP /192.168.1.100/ /192.168.1.1/ -i eth1
urlsnarf –i eth1

You need to replace 192.168.1.100 with the IP of the victim and 192.168.1.1 with your gateway IP. Furthermore replace eth1 in case it does not match the network interface that you are using.

[Slimmay]

Thank you all very much, I've used wireshark to gain a better basic understanding, and boy is this such a complex and awesome topic!

Ok, just one question. How do i find out my IP/victim's IP. I've read before that most APs accept 255.255.255.255 or something like that for an IP address. Is this true?

Thanks again!

[Andy90]

If the other computer has a similar IP address (first few bits are the same) you could use Nmap to scan for it

Edit - bits as in 'lumps' not bits as in 10101

[calypso]

i dont think youll find many ip addresses like 255.255.255.255, this is most probably your subnet mask.

your routers ip is most probably 192.168.2.1 or 192.168.1.1

you can log into your router and find all connected clients with their respective ips.

you can use nmap to find ips on your network