Grab login credentials on standard html page

[bulgin]

I somewhere remember reading about a backtrack module/program/script that allows someone to grab login credentials from a standard html login page. I need for class demo but can't find it on the backtrack4 distribution.

I could have read wrong, but something about faking login sites, etc.

Thanks.

[KMDave]

Which kind of class is that?

[bulgin]

Hi KMDave -- it's actually a demo I'm giving to non-profits on security awareness. Not that they can defeat this but should be aware of this kind of phishing attempt. It's alongside general awareness such as:

* examining mail headers and comparing to the potentially spoofed "from" name.
* examining the URL in the address box to make sure links go where they say they are going
* and sniffing demo via ettercap for passwords and the need to use encrypted connections.

Thanks.