Soft AP / Phishing Script [Release]

[nivong]

For anyone with DHCP problems, try this:
http://www.backtrack-linux.org/forum...l=1#post216706

[VulpiArgenti]

I've just noticed a stupid mistake in the portal hotspot php syntax. This stopped it from displaying as I intended to the victim (although the captive portal still functioned correctly). The amended version is now uploaded - apologies.
http://code.google.com/p/pwn-star/do...3.tgz&can=2&q=

-------------------------------------------------------------------------------------------------

@pr013, thanks for your enthusiasm
We already have in the basic menu option 4 "Simple web server with dnsspoof". This allows you to specify your own index.html etc, which could be a cloned site. I could easily add the ability to use a custom hosts file for dnsspoof. Would this do the trick?

[pr0l3]

I used that option at a trade show recently - to bounce people to a simple html site I set up...

But what about bouncing them to sites created in SET or something similar - would a hosts file be able to interpret, much like windows' hosts file...

xx.xx.xx.xx site(to be spoofed)

You know the dnsspoof 'host' file included in ettercap - etter.dns I think, without booting up to look at it... you can specify only certain sites to be spoofed...

[Carto_]

VulpiArgenti : You're my boss.
I've tried everything and they all worked like a charm. Thank you so much for your script, your source code is also of particular interest for me.
Thx so much, and please never stop providing us tools like this one :-)

PS: Maybe you could add a function that will do the same but on the local network (sslstrip & cie).
Thx

[VulpiArgenti]

@pr0l3,
Yup, dnsspoof can do that. Look out for in in PwnStar v0.7, out next week.

-----------------------------------------------------------------------------------

Hi Carto_
Thanks for the kind words.
Have you looked at quickset/yamas/easy-creds? They can all do local network sniffing.
Or you could write something yourself. I started PwnSTAR purely to teach myself bash scripting. You might be surprised how quickly you pick it up (after a few weeks of banging your head on the desk )

[pr0l3]

PwnStar v0.7 - AWESOME.

I'm going to kick off my company's new technoblog with a writeup - I'll post a link here.

I've been going through your code too - trying to teach myself bash scripting. You're a wonderful influence.

[Carto_]

Hey. I can try to write something myself. I already have written a python script that automatize the implementation of such a script in a lan. I will try to write that in bash, that can be interesting.

v0.7 ?! Awesome, what would you add in this version ?

[parrotface]

I cant get IP when I try and connect (had this problem with most of other peoples scripts like g0tmi1k etc)
DHCP was not installed (apt-get install ) still does not give IP
I now trying my own short script and bingo I can set up a AP and I get an IP.
Now trying your script to solve the problem but hitting my head against a brickwall with eterm. I know you said previously about the background.
I just can't read what is displayed in eterm if only I could set the background.
Please would somebody show me how then I may be able to carry on (xterm does not have this problem)
many thanks

[VulpiArgenti]

adjust the background settings: transparency off, pixmap none; then "save theme settings"

This should get rid of the horrible default background.

Eterm -g 90x30-0-0 -f DarkOrchid4 -b LightYellow1 --font-fx none --buttonbar 0  --scrollbar 0 -T "Scan channel $apchan"

If you don't like the colours, you can change them with the -f(oreground) and -b(ackground) switches. Paste the above into a terminal and play with X11 colours. If you remove these 2 switches completely, Eterm will default to black and white. If there are still problems, post a screenshot.

[deviney]

is it just me thats having problems getting sslstrip to get passwords when just sniffing? i get internet access and its a stable and fast connection but still i get no passwords?

Anybody got a fix for this?