Soft AP / Phishing Script [Release]

[erdmaennchen]

Hey, nice work, but when i want to sniff with fake ap your script doesnt start the dhcp server correctly. yes - i installed the dhcp3-server package before, stopped it and removed the standard configfile. the dhcpd response with a failure on line 10, but i dont know where you create your own config so i cant fix it for me.

[VulpiArgenti]

Hi Meerkat,

You don't need to manually modify dhcp3-server in any way; let the script do it all. If you have been playing with dhcp3 I would suggest first of all a purge and re-install.

You can read the script (from line 670 approx) to see what it does. The generated file is /tmp/dhcpd.conf.

Please post a follow-up.

[devi1]

@erdmaennchen: I'm not sure if you're having the same problem I was but it sounds like it.

Line 647 (i haven't upgraded to the new version yet) shows this:

apdns=$(grep nameserver /etc/resolv.conf | awk '{print $2}')

When I run this command on my own I get 2 IP addresses returned:

root@bt:~# grep nameserver /etc/resolv.conf | awk '{print $2}'
192.168.1.1
xxx.xxx.2.25

Obviously I just want the 192.168.1.1 address and the error is caused by the command returning 2 when 1 is expected.

I changed line 647 to this:

apdns=$(grep nameserver /etc/resolv.conf | awk 'NR==1 {print $2}')

And if I run this command in a command line:

root@bt:~# grep nameserver /etc/resolv.conf | awk 'NR==1 {print $2}'
192.168.1.1

Problem solved

[erdmaennchen]

Hi Meerkat,

You don't need to manually modify dhcp3-server in any way; let the script do it all. If you have been playing with dhcp3 I would suggest first of all a purge and re-install.

You can read the script (from line 670 approx) to see what it does. The generated file is /tmp/dhcpd.conf.

Please post a follow-up.

I figured out my problem. I have two dns entries but the second is in on a new line in the dhcpd.conf without a ";" at the end. I fixed that with a static IP in your script.

Now the script runs without a error, but the xterms disappear after a few seconds and i cant see any data in /root . The processes were killed too.

Iam using Backtrack R2 with actual pakets.

Any idea?

[VulpiArgenti]

@devi1

Good catch on the nameservers. There was only ever one on my test systems - never thought of the possibility of multiple entries.

I am slightly worried your solution might cause problems if the local address is not the first listing (I'm not sure if this happens). Would you (and @erdmaennchen) mind trying out this variation; if it's good I'll add it to the next release:

var=$(grep "nameserver" /etc/resolv.conf | awk '{print $2}' | wc -l)   # count the number of nameservers

if [[ $var = 1 ]];then          # if 1, use it in dhcpd.conf
        apdns=$(grep nameserver /etc/resolv.conf | awk '{print $2}')
else                            # if more than 1, attempt to find common private ip addresses
        apdns=$((grep "nameserver 192.168" /etc/resolv.conf || grep "nameserver 10." /etc/resolv.conf) | awk '{print $2}')
fi

[VulpiArgenti]

Hi erdmaennchen,

It would be a shame if you were stuck with static IPs. Please try the solution above (or wait for version 0.52 in a few days).

the xterms disappear after a few seconds

I presume you mean the sniffing eterms, not every one? If so, it is probably because you don't have sslstrip fully installed. See line 732 (approx) of the script:

# make sure you have run setup.py in /pentest/web/sslstrip

Give this a try.

[satana77]

hi one more time,
Still don't get result.
i tried to sset DNS server IP to 192.168.1.1(my routers IP),as you said:
In this case i can surf only using Opera mini,i guess opera uses own proxy server or smth like this.If i use standard nokia 5800 browser,it said "Wrong Server Name"

[VulpiArgenti]

Hi satana77

I'm not clear whether you are doing this manually, or running the script. If the script, then don't change anything, let it try with all the default values.

Having said that, if your client is managing to surf with Opera, then the network must be set up correctly. Congratulations!

[satana77]

I did it with script.And There was a mistake i can surf net only when gateway(and dns) set to 192.168.0.1 (default script value),not 192.168.1.1(my routers ip).
but when I can surf with opera mini,sslstrip and others didn't work.

[VulpiArgenti]

[Update]

Version 0.52 out: fixes an issue with multiple nameservers in resolv.conf

This upgrade is only necessary for those having problems giving internet access to clients.

http://code.google.com/p/pwn-star/do..._0.52&can=2&q=