easy-creds 3.6 released

[ericmilam]

http://sourceforge.net/projects/easy-creds/files/

v3.6-BT5 11/08/2011

New Attacks:
- DNS Spoofing Attack
- AP Client deauth

New Prereqs:
- SSLStrip Updates
- Edit etter.dns

Enhancements:
- Exit will now clean up attack before exiting
- Less input required for creating dhcp.conf file

Fixes:
- Route add for wireless attacks specified wrong interface and would fail
- Dsniff, URLSnarf & SSLStrip were listening on wrong interface for wireless attacks

Instructional Videos:
http://www.youtube.com/user/Brav0Hax

[comaX]

Thanks for the release, I sure will give it a try

Where is it regarding integration to the repo ? How about that speech you had to do ? Done yet ? It would be nice hearing news, maybe in another thread

Keep up the good work !

[sostentado]

yahu! tnx..

[ericmilam]

@comaX I submitted an "upgrade" via redmine to BT. I am not sure how long the process takes there. Should be a month or so I assume. I did give a talk at Hack3rcon, you can see it on my YouTube page I think I linked to it. Still waiting to hear back from Black Hat Abu Dhabi. Doubt they'll accept it, but I submitted for Shmoocon as well so fingers crossed.

Also, even bigger news me and a few other people have officially taken over ettercap development with Alor & Naga's blessing. First new release in 6.5 years will be coming out December 2nd. All bugs fixed and currently being tested on multiple OS's. Awesome stuff!

[comaX]

@comaX I submitted an "upgrade" via redmine to BT. I am not sure how long the process takes there. Should be a month or so I assume. I did give a talk at Hack3rcon, you can see it on my YouTube page I think I linked to it. Still waiting to hear back from Black Hat Abu Dhabi. Doubt they'll accept it, but I submitted for Shmoocon as well so fingers crossed.

Thanks for the news, and I'll make sure to check the vid

Also, even bigger news me and a few other people have officially taken over ettercap development with Alor & Naga's blessing. First new release in 6.5 years will be coming out December 2nd. All bugs fixed and currently being tested on multiple OS's. Awesome stuff!

That is SWEET music to my ears ! Congrats bro !

[loveablerouge]

http://sourceforge.net/projects/easy-creds/files/

v3.6-BT5 11/08/2011

New Attacks:
- DNS Spoofing Attack
- AP Client deauth

New Prereqs:
- SSLStrip Updates
- Edit etter.dns

Enhancements:
- Exit will now clean up attack before exiting
- Less input required for creating dhcp.conf file

Fixes:
- Route add for wireless attacks specified wrong interface and would fail
- Dsniff, URLSnarf & SSLStrip were listening on wrong interface for wireless attacks

Instructional Videos:
http://www.youtube.com/user/Brav0Hax

thanks for the update , one question do you think this script could be used on maemo n900 ??

[kafteras]

I dont know if im the only one but, i get this errors on sslstrip when i poison the network:

sslstrip 0.9 by Moxie Marlinspike running...
Traceback (most recent call last):
File "/pentest/web/sslstrip/sslstrip.py", line 105, in main
reactor.run()
File "/usr/lib/python2.6/dist-packages/twisted/internet/base.py", line 1170, in run
self.mainLoop()
File "/usr/lib/python2.6/dist-packages/twisted/internet/base.py", line 1182, in mainLoop
self.doIteration(t)
File "/usr/lib/python2.6/dist-packages/twisted/internet/selectreactor.py", line 140, in doSelect
_logrun(selectable, _drdw, selectable, method, dict)
--- <exception caught here> ---
File "/usr/lib/python2.6/dist-packages/twisted/python/log.py", line 84, in callWithLogger
return callWithContext({"system": lp}, func, *args, **kw)
File "/usr/lib/python2.6/dist-packages/twisted/python/log.py", line 69, in callWithContext
return context.call({ILogContext: newCtx}, func, *args, **kw)
File "/usr/lib/python2.6/dist-packages/twisted/python/context.py", line 59, in callWithContext
return self.currentContext().callWithContext(ctx, func, *args, **kw)
File "/usr/lib/python2.6/dist-packages/twisted/python/context.py", line 37, in callWithContext
return func(*args,**kw)
File "/usr/lib/python2.6/dist-packages/twisted/internet/selectreactor.py", line 156, in _doReadOrWrite
self._disconnectSelectable(selectable, why, method=="doRead")
File "/usr/lib/python2.6/dist-packages/twisted/internet/posixbase.py", line 191, in _disconnectSelectable
selectable.readConnectionLost(f)
File "/usr/lib/python2.6/dist-packages/twisted/internet/tcp.py", line 508, in readConnectionLost
self.connectionLost(reason)
File "/usr/lib/python2.6/dist-packages/twisted/internet/tcp.py", line 677, in connectionLost
Connection.connectionLost(self, reason)
File "/usr/lib/python2.6/dist-packages/twisted/internet/tcp.py", line 519, in connectionLost
protocol.connectionLost(reason)
File "/usr/lib/python2.6/dist-packages/twisted/web/http.py", line 489, in connectionLost
self.handleResponseEnd()
File "/pentest/web/sslstrip/sslstrip/ServerConnection.py", line 119, in handleResponseEnd
HTTPClient.handleResponseEnd(self)
File "/usr/lib/python2.6/dist-packages/twisted/web/http.py", line 500, in handleResponseEnd
self.handleResponse(b)
File "/pentest/web/sslstrip/sslstrip/ServerConnection.py", line 134, in handleResponse
self.shutdown()
File "/pentest/web/sslstrip/sslstrip/ServerConnection.py", line 154, in shutdown
self.client.finish()
File "/usr/lib/python2.6/dist-packages/twisted/web/http.py", line 900, in finish
"Request.finish called on a request after its connection was lost; "
exceptions.RuntimeError: Request.finish called on a request after its connection was lost; use Request.notifyFinish to keep track of this.
Traceback (most recent call last):
File "/pentest/web/sslstrip/sslstrip.py", line 105, in main
reactor.run()
File "/usr/lib/python2.6/dist-packages/twisted/internet/base.py", line 1170, in run
self.mainLoop()
File "/usr/lib/python2.6/dist-packages/twisted/internet/base.py", line 1182, in mainLoop
self.doIteration(t)
File "/usr/lib/python2.6/dist-packages/twisted/internet/selectreactor.py", line 140, in doSelect
_logrun(selectable, _drdw, selectable, method, dict)
--- <exception caught here> ---
File "/usr/lib/python2.6/dist-packages/twisted/python/log.py", line 84, in callWithLogger
return callWithContext({"system": lp}, func, *args, **kw)
File "/usr/lib/python2.6/dist-packages/twisted/python/log.py", line 69, in callWithContext
return context.call({ILogContext: newCtx}, func, *args, **kw)
File "/usr/lib/python2.6/dist-packages/twisted/python/context.py", line 59, in callWithContext
return self.currentContext().callWithContext(ctx, func, *args, **kw)
File "/usr/lib/python2.6/dist-packages/twisted/python/context.py", line 37, in callWithContext
return func(*args,**kw)
File "/usr/lib/python2.6/dist-packages/twisted/internet/selectreactor.py", line 156, in _doReadOrWrite
self._disconnectSelectable(selectable, why, method=="doRead")
File "/usr/lib/python2.6/dist-packages/twisted/internet/posixbase.py", line 191, in _disconnectSelectable
selectable.readConnectionLost(f)
File "/usr/lib/python2.6/dist-packages/twisted/internet/tcp.py", line 508, in readConnectionLost
self.connectionLost(reason)
File "/usr/lib/python2.6/dist-packages/twisted/internet/tcp.py", line 677, in connectionLost
Connection.connectionLost(self, reason)
File "/usr/lib/python2.6/dist-packages/twisted/internet/tcp.py", line 519, in connectionLost
protocol.connectionLost(reason)
File "/usr/lib/python2.6/dist-packages/twisted/web/http.py", line 489, in connectionLost
self.handleResponseEnd()
File "/pentest/web/sslstrip/sslstrip/ServerConnection.py", line 119, in handleResponseEnd
HTTPClient.handleResponseEnd(self)
File "/usr/lib/python2.6/dist-packages/twisted/web/http.py", line 500, in handleResponseEnd
self.handleResponse(b)
File "/pentest/web/sslstrip/sslstrip/ServerConnection.py", line 134, in handleResponse
self.shutdown()
File "/pentest/web/sslstrip/sslstrip/ServerConnection.py", line 154, in shutdown
self.client.finish()
File "/usr/lib/python2.6/dist-packages/twisted/web/http.py", line 900, in finish
"Request.finish called on a request after its connection was lost; "
exceptions.RuntimeError: Request.finish called on a request after its connection was lost; use Request.notifyFinish to keep track of this.
Traceback (most recent call last):
File "/pentest/web/sslstrip/sslstrip.py", line 105, in main

Any1 have any ideas? The network is crashing after that.

[ericmilam]

I do get errors in the sslstrip window, most are benign and don't crash anything. I am not sure why your network would crash after that. What specifically do you mean by "network"?

[kafteras]

Well i mean that after the sslstrip error no1 can access the internet. Every1 gets timeout.
But im not sure if its this error the cause, because either way, when i poison a network, every1 must refresh 2-3 times the webpages before they open.

Do you have any ideas? Maybe the dhcp server is the problem?

Thanks anyway

[ericmilam]

No...there is a known issue with sslstrip starting with 0.8 where sometimes you have to try to access the page more than once before it loads. I believe someone notified Moxie, but he said he could not reproduce the issue. I see it all the time. If I enter the website in the nav window and hit enter...nothing happens. If I click in the nav window and hit enter again, then it loads.

With regards to no one being able to access the internet, I've never experienced that. I hope you're not poisoning the dhcp server.... Watch my Hack3rcon talk about properly picking targets for poisoning. You should never really do it against a server...I mean you can, but I never would.

One quick way to DoS the LAN is to poison the physical IPs in an HSRP or CARP situation. If you poison both the virtual IP (gateway) and the physical IPs that create that gateway, the entire segment will go down.

Happy hunting.