Results 1 to 4 of 4

Thread: ettercap and Squid Proxy

  1. #1
    Just burned his ISO
    Join Date
    Jan 2010
    Posts
    13

    Default ettercap and Squid Proxy

    Hi dear,

    i have one question , if my squid server is in other vlan , for example my clines ip address is 192.168.2.1/24 and gatway is 192.168.1.1 but my Squid proxy server ip is in 192.168.2.1 and client can access to internet just through proxy .
    now if attacker is in Clients Vlan , Ettercap will be work or no?

    Thanks .

  2. #2
    Senior Member daedalus1776's Avatar
    Join Date
    Jan 2012
    Location
    Australia
    Posts
    112

    Default Re: ettercap and Squid Proxy

    ARP packets won't travel across different subnets. So no. However are you sure it's 192.168.2.1/24 and not 192.168.1.1/23?
    Even so, it depends what you want to do ARP cache poisoning on. You can poison route the proxy and the client. It doesn't HAVE to be the gateway.
    Furthermore, check this out: http://www.oxid.it/downloads/apr-intro.swf
    It has almost everything you need to know

  3. #3
    Just burned his ISO
    Join Date
    Jan 2010
    Posts
    13

    Default Re: ettercap and Squid Proxy

    Thank You . Very nice flash file for arp Poison , yes i got mistake . My Clients ip Address is : 192.168.1.1/24 and Gateway is 192.168.1.1 and attacker ip is 192.168.1.5/24 . But my Squid Proxy server ip address is 192.168.2.1/24 and its on other Vlan .
    after i run Ettercap i just see Authentication Clients from Active Directory , and i not see any Traffic internet on ettercap , is this Because my Squid is in other Vlan ?

  4. #4
    Senior Member daedalus1776's Avatar
    Join Date
    Jan 2012
    Location
    Australia
    Posts
    112

    Default Re: ettercap and Squid Proxy

    yep. Like I said ARP packets won't travel accross different subnets or VLANs. You're sending malformed ARP packets to the two machines you want to poison.. Kinda hard to poison a machine if it's impossible to send the packet required over to it

Similar Threads

  1. Some problems with Nmap + Fake DNS + SQUID + ettercap + sslstrip...
    By S0m3c001N1ck in forum BackTrack 5 Experts Section
    Replies: 0
    Last Post: 02-15-2012, 08:26 AM
  2. help with squid and sslstrip
    By roonie in forum Beginners Forum
    Replies: 1
    Last Post: 10-18-2010, 05:56 PM
  3. disable encryption in squid
    By bl0tch in forum Beginners Forum
    Replies: 2
    Last Post: 10-13-2010, 05:16 AM
  4. sslstrip & ettercap when squid authentication is enabled
    By djforum in forum Beginners Forum
    Replies: 3
    Last Post: 04-22-2010, 09:50 AM
  5. Anybody setup a Transparent Squid server?
    By imported_spankdidly in forum OLD General IT Discussion
    Replies: 3
    Last Post: 09-17-2007, 05:01 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •