man in the middle with ettercap?

[kid protocol]

I set up a man in the middle attack on my network with ettercap, and I notice when I go to sites like yahoo, myspace, and google my browser says that the certificate is not trusted, and that some body could be impersonating the server.(lol) Is their any way around this?
Here's the command:ettercap -T -q -p -M ARP // //

[KMDave]

Theoretically yeah it is possible.

[larryhaja]

I notice when I go to sites like yahoo, myspace, and google my browser says that the certificate is not trusted, and that some body could be impersonating the server.(lol) Is their any way around this?

There was a tool introduced back in August 2008 called "The Middler" that presented the user with a http page rather then the corresponding https page. This overrides the Certificate check that most browsers present to the user. It is open source and the original author said the code was going to be released, but as far as I know it was never released.
http://www.geek.com/articles/news/op...ector-2008108/
http://mirror.sweon.net/defcon16/Spe...16-beale-2.pdf

[kid protocol]

I've been reading through the forum and found that quite a few people has encountered this issue. Also that was stated that my user name and pass does not get logged from this site also. Has any one corrected this issue?

[imported_=Tron=]

I've been reading through the forum and found that quite a few people has encountered this issue. Also that was stated that my user name and pass does not get logged from this site also. Has any one corrected this issue?

Well this is not an Ettercap issue per se. Unless you use a properly signed and valid certificate for the target cite all newer browsers will catch the error and warn the user about the possible security breach.

Even though this site does not use SSL encryption the password will be hashed before it is transmitted so it can not be intercepted in clear-text using a simple packet sniffer. On the other hand it is possible to replace the script that does the hashing with your own and this way obtain the password quite easily.

[KMDave]

What you are looking for is called Certifcate Collision. But unless you got the computing power of around 200 PS3's you won't find a suitable one in apropriate time.

If you want to I can post the link to the presentation of it.

[kid protocol]

What you are looking for is called Certifcate Collision. But unless you got the computing power of around 200 PS3's you won't find a suitable one in apropriate time.

If you want to I can post the link to the presentation of it.

Yes I'll appreciate that. Any other alternatives?

[KMDave]

Yes I'll appreciate that. Any other alternatives?

Here is the link.
Have fun with it

[omarara]

sorry this is a wrong Post

[Wolfbane]

What you are looking for is called Certifcate Collision. But unless you got the computing power of around 200 PS3's you won't find a suitable one in apropriate time.

If you want to I can post the link to the presentation of it.

hey KMDave, do you still have that link kicking around?