SSLStrip & Ettercap not playing nicely together in BT5R1

[MattMarquis]

You said it still works? Even with the constant error messages? Granted, I only tested it out once, and my lab setup is sometimes a little flaky, so when I found this thread I just assumed it didn't work at all. I thought atm it didn't work?

[ericmilam]

When I first saw it, I didn't think it worked either, but as I continued to try to find the error, I found it was WORKING. I recompiled from source and commented out the L3 error section in ec_send.c and that got rid of the error, but doesn't actually solve the problem.

As far as I can tell, the errors are annoying, but it still works. If anyone has a different experience, please let me know!!

Thanks

[Carnacior]

So its probably the libnet ? Have you tried installing different version ? Im gonna boot and check out )

[ericmilam]

So its probably the libnet ? Have you tried installing different version ? Im gonna boot and check out )

I haven't tried a diff libnet....if you look at the code in send_ec.c it'll show you how the headers are created, etc. I'm still a bit lost in the c code...

[DeserTEagLe]

The problem may be that thier are two etter.conf files.

locate etter.conf
              /etc/etter.conf
               /usr/local/etc/etter.conf

uncomment theses lines in both etter.conf files

# if you use iptables:
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

[MattMarquis]

For what little it is worth, I tried it yesterday and it did 'NOT' work. Retried w/ a fresh DL of BT4R2, worked fine.

[Carnacior]

Ok.. i got a temporary fix... seems like 38 kernel still has vga_switcheroo integrated and works :X
I installed the 38 kernel ... downgraded ettercap to bt4 and now i got it working. When poisoning with ettercap ssl not working... even if i redirect and setup sslstrip... gives me the invalid certificate shit... but redirect trough sslstrip with nice arpsoof i get ettercap results... ssl and etc... works like charm... only a few page time outs now and then but finally got it working.

Oh i also forgot to mention if you downgrade ettercap to bt4 version there will be another etter.conf file in /usr/etc/etter.conf and thats the good one.

[ericmilam]

My script points to /etc/etter.conf I use the -a switch so I can tell it exactly which one it uses.

[ericmilam]

Kernel 2.6.38 always worked fine for me. It's only since the change to 2.6.39.4 that it seems to mess up.

If you did an apt-get update && apt-get dist-upgrade from BT5 to BT5R1, you can simply change Grub to boot to your older kernel version (2.6.38) and everything will be fine again.

I change my grub default to 2 and it worked fine.

[u5h4nt]

ani body can tell me how to downgrade the kernel to 2.6.38 !! please !! need help U !!!