easy-creds bash script

[ericmilam]

easy-creds is a simple bash script which makes sniffing for credentials a little bit easier

This script is menu driven to make populating ettercap easier. In addition it leverages sslstrip, dsniff & urlsnarf.

Provdes easy input for Ettercap standard ARP poison, oneway ARP poison & DHCP poison.

Written in bash and easily expandable. Scripted on BT4 and tested on R1 & R2.

easy-creds - Project Hosting on Google Code

Best Regards,
Eric

[sickness]

Moved to a more suitable place.

[sLiPpErY]

Decent - You may want to check out my tool a few posts down also written in Bash. Link to Tool

Together I think we could make one fine tool!

let me know what you think.

[Scamentology]

Thanks for this. very useful.

easy-creds is a simple bash script which makes sniffing for credentials a little bit easier

This script is menu driven to make populating ettercap easier. In addition it leverages sslstrip, dsniff & urlsnarf.

Provdes easy input for Ettercap standard ARP poison, oneway ARP poison & DHCP poison.

Written in bash and easily expandable. Scripted on BT4 and tested on R1 & R2.

easy-creds - Project Hosting on Google Code

Best Regards,
Eric

[gorara]

Looks good, although when I ran it I got an error:

Provide path for saving log files, ex. root, *NOT* /root/:
test
mkdir: cannot create directory `/test/easy-creds-2010-12-11-2120': No such file or directory
easy-creds.sh: line 49: cd: /test/easy-creds-2010-12-11-2120: No such file or directory

I looked at the code and the problem seems to be at lines 48, 95, and 140 (where the mkdir command is). You do not specify the -p parameter to create the parent directory. After I changed this it seems to work great.

[ericmilam]

Thanks for the info....I'll add that...sorry bout that.

I am also currently working on an sslstrip parser with editable definition file, just to have something quick and easy to find your stuff!

Also, going to add a wireless fake ap option. Already coded and ready to implement.

Decent - You may want to check out my tool a few posts down also written in Bash. Link to Tool

Together I think we could make one fine tool!

let me know what you think.

I really like that...looks like you did some hard, hard work there. I have a more simplified one, but this looks bad a$$.



Best Regards,
Eric

[ericmilam]

All,

I've upgraded the script to v2

Added
-FakeAP option
-SSLStrip log parser (using definition file)

easy-creds - Project Hosting on Google Code

I would love to see the definition file grow! If you have sites and variables, please send them my way!! The more definitions, the more chance of catching credentials while parsing!

Happy hunting!