easy-creds v3 released

[ericmilam]

All,

easy-creds is a bash script that leverages ettercap and other tools to obtain credentials. It allows you to easily attack with basic arp poison, oneway arp poison and DHCP spoofing or a Fake AP. Includes sslstrip log file parser

easy-creds | Download easy-creds software for free at SourceForge.net

I did a lot of revamping for this version. The menus are laid out better, cleaner.

Attack menu includes:
ARP poisoning
oneway Arp poisoning
DHCP poisoning
ICMP Poisoning
FakeAP - Fixed and now works on R2

Data Parsing menu includes:
sslstrip.log file parser
dsniff file parser
ettercap.eci file parser

In addition, you can view the ettercap man page, nano /etc/etter.conf & nano the /etc/default/dhcp3-server file (for adding at0 interface for dhcp server)

I think everyone will enjoy this version much better. I don't really see too many more "major" revisions in the future...but you never know.

Use it, let me know how it does for you... If there are some changes to be made, let me know.

If you really like it, can you please ask to have it added to BT5? I can dream can't I?

Best Regards,
Eric

aka J0hnnyBr@v0

[ericmilam]

All,

Took me a bit, but this is what I added to my easy-creds script.

In addition, you have to add at0 to the interfaces section of /etc/default/dhcp3-server file (can do in my script)

Happy hunting!
Eric

aka J0hnnyBr@v0

echo "Creating a dhcpd.conf to assign addresses to clients that connect to us"
#create a backup just in case...
cp /etc/dhcp3/dhcpd.conf /etc/dhcp3/dhcpd.conf_bckup
#empty the file to start clean
cat /dev/null > /etc/dhcp3/dhcpd.conf
echo "default-lease-time 600;" > /etc/dhcp3/dhcpd.conf
echo "max-lease-time 720;"  >> /etc/dhcp3/dhcpd.conf
echo "ddns-update-style none;" >> /etc/dhcp3/dhcpd.conf
echo "authoritative;"  >> /etc/dhcp3/dhcpd.conf
echo "log-facility local7;"  >> /etc/dhcp3/dhcpd.conf
echo "subnet 10.0.0.0 netmask 255.255.255.0 {"  >> /etc/dhcp3/dhcpd.conf
echo "range 10.0.0.100 10.0.0.254;"  >> /etc/dhcp3/dhcpd.conf
echo "option routers 10.0.0.1;"  >> /etc/dhcp3/dhcpd.conf
echo "option subnet-mask 255.255.255.0;" >> /etc/dhcp3/dhcpd.conf
echo "option domain-name-servers 8.8.8.8;"  >> /etc/dhcp3/dhcpd.conf
echo "option broadcast-address 10.0.0.255;" >> /etc/dhcp3/dhcpd.conf
echo "allow unknown-clients;" >> /etc/dhcp3/dhcpd.conf
echo "}"  >> /etc/dhcp3/dhcpd.conf
#
echo 'DHCP server starting on our airbase-ng interface (at0)'
echo > /var/lib/dhcp3/dhcpd.leases
mkdir -p /var/run/dhcp3-server
chown -R dhcpd:dhcpd /var/run/dhcp3-server
ln -s /var/run/dhcp3-server/dhcpd.pid /var/run/dhcpd.pid
dhcpd3 -q -cf /etc/dhcp3/dhcpd.conf -pf /var/run/dhcp3-server/dhcpd.pid at0 &
sleep 3

entire easy-creds script:
easy-creds - Browse Files at SourceForge.net

[ericmilam]

I have released, what will most likely be the final version of the script. Other than bug fixes, I don't think it needs any more functionality

Changes from v3.0
-Code Cleanup
-Catches and handles ctrl-c input from user
-dhcpd.conf configuration via input for FakeAP
-Host list file creation with nmap
-Option to use populated host list file for basic & oneway ARP poison
-Updated definition.sslstrip file

Happy hunting!