Google found your answer...the Ettercap forums.Originally Posted by unlazyfree
ettercap filters
I tried searching here and google but no luck
Is it possible to make a filter for ettercap that will redirect ALL http traffic to a single website?
Or is anyone good at coding, cause I know nothing about it and it seemed too hard for me to learn
Oh and another thing, is it possible to replace all youtube videos with a single vid of my choosing?
Google found your answer...the Ettercap forums.
"\x74\x68\x65\x70\x72\x65\x7a\x39\x38";
Well, like I said, I wasn't able to find examples of filters on google (searched ettercap forums, too). I was hoping for a thread where people post their scripts and what they do. The etter.filter.examples file wasn't any help either (at least to me, like I said I don't know much about programming in C or whatever language it is)
You gotta trust me when I say I searched, I spent about a week looking around the ettercap forums, here, and google.
I recommended the ettercap forums because, while you might not find a pre-made script, you're more likely to get a better answer there vice here since everyone there knows ettercap exclusively.
"\x74\x68\x65\x70\x72\x65\x7a\x39\x38";
There is a video on http://www.irongeek.com/ about Ettercap filters, i hope that helps.
PS: try Visual Basic, its a very easy to learn programming language for beginners.
I tried, the forums pretty much dead. there hasn't been a single post in quite a while and its been taken over by bots
Man, I asked this SAME question a few months back. I went to the Ettercap forums, not sure what's going on there, but it was pretty worthless. I found a small Tutorial that gave a little info and it actually worked, but not real well. I can't find the page now, but I ran across this
if (ip.proto == TCP && tcp.src == 80) {
replace("<HEAD>", "<HEAD><META http-equiv=\"refresh\" content=\"0;URL=http://tazforum.thetazzone.com/index.php\">");
replace("<head>", "<head><META http-equiv=\"refresh\" content=\"0;URL=http://tazforum.thetazzone.com/index.php\">");
msg("redirect success\n");
}
From h**p://tazforum.thetazzone.com/viewtopic.php?t=6517
Seems IIIInteresting! I know I saved the other Tutorial, probably on my backtrack laptop. I will try and find that tomorrow. This looks like it (the filter) just with a different URL redirection. The other one was to zomba or zoomba or zooma or something. Good luck!
(I was thinking redirect all Lan traffic to a metasploit ANI or WMV exploit, and then remote shell it. Every time I get around to trying it, something comes up. I even threw together a few scripts to make it all quicker, but there's always work to do somewhere).
awesome I'll check this out. Do you know if it's possible to filter youtube vids to one specific one? I sorta had an idea, the script for the picture replace, maybe just put in the file type of the youtube vid, then a link to the other vid (they give the links to the videos on youtube)
No idea, I tried it with the previous script that I had found (can't find right now), but that didn't work too well. It would only redirect on certain pages it seems. Or it would say that the filter ran, but on the test laptop, the page was not redirected. I would REALLY like to find a filter that redirects EVERY page to a desired site. Kinda like a nocatsplash page (I think, ddwrt firmware for linksys router?). If I could script, I could come up with something, but I can't, so I wont lol. I'm not a l33t h4x0r, I just find anything wireless veddy interesting, that's how I found backtrack. From there, the monster grew. I tried ettercap at a hotel I was staying at, LOL, that's all I can say. Most are filtered or have a protection against that now. Last place, it had open wifi, BUT, I was too far away from the lobby to have a constant connection. (Sucked!). Anyway, if you find a script or something that works, PLEASE let me know.
Posting Permissions