Page 9 of 14 FirstFirst ... 7891011 ... LastLast
Results 81 to 90 of 136

Thread: Soft AP / Phishing Script [Release]

  1. #81
    Junior Member
    Join Date
    Jan 2010
    Posts
    31

    Default Re: Soft AP / Phishing Script [Release]

    Hum, same for me deviney !

    I am launching pwnSTAR in my local network, all is working fine (victime station have access to the internet) but I wan access to https pages. I mean when I search gmail in google and clic on Gmail --> https://mail.google.com ... ! And in the sslstrip log, lot of shit-data.

    My internet connexion is OK, and PwnSTAR well configured.
    Running it on BT5R2, sslstrip V 0.9

  2. #82
    Senior Member
    Join Date
    Jun 2007
    Location
    UK
    Posts
    175

    Default Re: Soft AP / Phishing Script [Release]

    Hi
    Still having trouble with Eterm background
    adjust the background settings: transparency off, pixmap none; then "save theme settings"
    I assume this in the /usr/share/Eterm/themes/Eterm/theme.conf file.
    if so does the code need to be in a certain place.

    The IP problem I have seems to be that the dhcp server is not running
    many thanks

  3. #83
    Senior Member VulpiArgenti's Avatar
    Join Date
    Sep 2011
    Location
    lost
    Posts
    174

    Default Re: Soft AP / Phishing Script [Release]

    Hi parrotface

    You can set up theme.conf, but its not necessary, it can be done from an Eterm window.
    The Eterms that the script launches are stripped of menu-bars etc (to save desk space). You need to separately launch it from a terminal, and will then see a menu bar that will allow you to make the changes.

  4. #84
    Senior Member VulpiArgenti's Avatar
    Join Date
    Sep 2011
    Location
    lost
    Posts
    174

    Default Re: Soft AP / Phishing Script [Release]

    [v 0.7: EXPLOIT ADDED]

    I'm now adding in some of the classic exploits, starting with an evil-PDF. Don't get too excited; this is mainly for learning purposes. It's unlikely to work in your local coffee-shop, where most people will have a patched Adobe Reader.

    The idea is to block internet access with the captive portal, until the correct access code has been entered. This is available from a downloadable pdf (which of course contains the exploit).
    The client is then allowed through the captive portal, and hopefully will stay connected long enough to be thoroughly owned. Two pdf's included, or you can supply your own.

    This blog supplied the inspiration: http://www.proso.com/2011/03/31/capt...ation-tests-2/

    Other new features:
    custom dnsspoofing in the basic menu (targeted spoofing for a particular site)
    Eterm cursor colour changed (more visible on light background)

    Script update: PwnSTAR_0.7
    New webpage: portal_pdf.tgz (contains evil-pdfs, index php, a "virgin" pdf to add your own payload, and a stand-alone payload that will work with the script)

    http://code.google.com/p/pwn-star/downloads/list


    Just to clarify, in order to use all the script modules, you need all the web sites marked "current release" in the download page.


    [I was hoping to include a Java applet attack but must confess to having problems with SET at the moment. I'll make the Applet the old-fashioned way and include it in the next release.]




  5. #85
    Just burned his ISO
    Join Date
    May 2012
    Posts
    11

    Default Re: Soft AP / Phishing Script [Release]

    http://backupserver.ca/blog/?p=64

    A quick writeup on PwnSTAR.

  6. #86
    Junior Member
    Join Date
    Dec 2011
    Posts
    30

    Default Riferimento: Soft AP / Phishing Script [Release]

    hello VulpiArgenti! i am still having troubles with the DHCP server problem...however i managed to start the server manually using http://teh-geek.com/?p=512 this guide...unfortunately i can't read the code of your script, so i can't find the differences between the manual and automatic way to activate the server, but what i suspect is that there is a difference in one of the last 3 steps on the guide (adding the route, pointing dhcpd.conf to the dhcp3-server and specify the interface (at0) or the flushing, and obviously the addresses and the path -tmp in your script, etc on the guide- ) . again, sorry if i am talking nonsense, but i'm just trying to focus the problem with a low experience on this could you help me solving this? thanks

  7. #87
    Senior Member VulpiArgenti's Avatar
    Join Date
    Sep 2011
    Location
    lost
    Posts
    174

    Default Re: Soft AP / Phishing Script [Release]

    Hi bugme
    Sorry, but I don't have enough specific info to help. Perhaps if you run the script in debug mode you may be able to narrow the problem down, and then post back.

    Code:
    bash -x path/to/PwnSTAR_0.7

  8. #88
    Senior Member
    Join Date
    Jun 2007
    Location
    UK
    Posts
    175

    Default Re: Soft AP / Phishing Script [Release]

    Hi
    Still can't get IP address from the AP PwnSTAT_0.7
    stopped dhcp3-server before starting script
    added extra line 720 - /etc/init.d/dhcp3-server start
    still no go
    /tmp/dhcpd.conf does not exist when running script

    Eterm background - sorry but I still can't sort out transparency off & pixmap none. please point show me where to change the theme, I not asking to be spoon fed but I am realy up against reading whats going on. Tempory fix, changed buttonbar to 1 thoughout the script at least this allows me to switch the pixmap.

    I have created my own bash script which sets up softAP and gives me an IP so I think my dhcp3-server is OK.
    many thanks

  9. #89
    Junior Member
    Join Date
    Dec 2011
    Posts
    30

    Default Riferimento: Re: Soft AP / Phishing Script [Release]

    ok now i really don't know what to say, but simply running the script in debug has solved any problem, and now everything works flawless thank you VulpiArgenti!!!!!!!


    Quote Originally Posted by VulpiArgenti View Post
    Hi bugme
    Sorry, but I don't have enough specific info to help. Perhaps if you run the script in debug mode you may be able to narrow the problem down, and then post back.

    Code:
    bash -x path/to/PwnSTAR_0.7

  10. #90
    Senior Member
    Join Date
    Jun 2007
    Location
    UK
    Posts
    175

    Default Re: Soft AP / Phishing Script [Release]

    Hi
    Just run script in debug and I can now get an IP so I guess it's a timing problem. Tried debug on earlier version and it didn't work then.
    thanks

    edit
    changed line 725 from sleep 1 to sleep 3 and I now get IP and can connect OK without running in debug
    Last edited by parrotface; 06-03-2012 at 11:41 AM.

Page 9 of 14 FirstFirst ... 7891011 ... LastLast

Similar Threads

  1. SET 0.7 phishing demo
    By pentest09 in forum BackTrack Videos
    Replies: 7
    Last Post: 12-19-2010, 10:31 PM
  2. Soft AP Upside Down image help pls, script nearly works
    By spriggsy in forum Beginners Forum
    Replies: 0
    Last Post: 11-05-2010, 12:01 PM
  3. Soft AP Script not working?
    By spriggsy in forum Beginners Forum
    Replies: 1
    Last Post: 05-19-2010, 01:08 PM
  4. Soft AP bash script
    By junke1990 in forum OLD Wireless
    Replies: 1
    Last Post: 04-03-2010, 08:30 AM
  5. backtrack 4 pre release user login script
    By eidos in forum OLD Newbie Area
    Replies: 1
    Last Post: 07-30-2009, 09:57 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •