Results 1 to 2 of 2

Thread: Ettercap Spoof Problem - (Message: apache/2.2.16 Server at www.xxx.com Port 80)

  1. #1
    Just burned his ISO
    Join Date
    Feb 2012
    Posts
    1

    Default Ettercap Spoof Problem - (Message: apache/2.2.16 Server at www.xxx.com Port 80)

    Hello everyone. First, I need to mention that I made a serious deep research before I am posting this. If you really know my answer is on google/this forum or somewhere please gently just say there is answer and I won't bother. I am seriously scared of posting something...

    I am using dns_spoof plugin with ettercap (not gui). When I forward any website to any local ip or other websites ip's I receive this message when I try to connect those spoofed websites.

    I changed etter.conf for ip tables. Changed etter_dns as I wanted. Then, ettercap -T -q -M arp:remote -P dns_spoof // (actually at this point I used almost every option that might have helped.) I am using Bt5 and all injection and other stuff works perfectly. Network card: Atheros AR5BXB63)

    I am not using SET, just forwarding. Whatever I do I receive this message from all computer on the network when I type the spoofed websites:

    Here, this is what explorer message looks like when I spoof www.cnn.com to www.toshiba.com...

    Index of /
    apc.php
    chive/
    mrtg/
    mysql/
    mysql2/
    Apache/2.2.16 (Unix) Server at www.toshiba.com Port 80

    I appreciate your help. I couldn't find any similar problem mentioned here. Again, if I am doing something seriously stupid, please tell me gently. I posted this after 15-20 days search. Just give me a clue, that's all I want. Thank you.
    Last edited by Porsuk; 02-07-2012 at 10:59 AM. Reason: Extra Info

  2. #2
    My life is this forum thorin's Avatar
    Join Date
    Jan 2010
    Posts
    2,629

    Default Re: Ettercap Spoof Problem - (Message: apache/2.2.16 Server at www.xxx.com Port 80)

    Doing a quick google search that index listing appears for a few different results. What IP addresses do www.toshiba.com and www.cnn.com resolve to when you're spoofing?
    I'm a compulsive post editor, you might wanna wait until my post has been online for 5-10 mins before quoting it as it will likely change.

    I know I seem harsh in some of my replies. SORRY! But if you're doing something illegal or posting something that seems to be obvious BS I'm going to call you on it.

Similar Threads

  1. Replies: 5
    Last Post: 04-03-2011, 01:54 PM
  2. redirect port 80 to 8080 problem apache
    By errorman in forum Beginners Forum
    Replies: 3
    Last Post: 11-04-2010, 10:12 PM
  3. Problem with Apache http server
    By Yoma! in forum Beginners Forum
    Replies: 4
    Last Post: 05-07-2010, 02:20 PM
  4. apache server
    By samer in forum OLD BT4beta HowTo's
    Replies: 3
    Last Post: 04-03-2009, 11:22 PM
  5. upgrading ...Apache Server on BT2
    By Jos Lohan in forum OLD Newbie Area
    Replies: 3
    Last Post: 02-26-2008, 04:33 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •