Alot of websites uses SSL on every page and not only login page.
Hi i have recently started using backtrack 5 r3 to learn more about my network and it's secruity,
I started with ettercap, i have set up my home network running 2 laptops one with windows 7 and the other with bt5. i was trying to see if i could capture un-encoded traffic between my windows laptop and internet sites.
I edited the ettercap.config coding as my friend suggested,
# if you use iptables:
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
I starded ettercap-gtk, unified sniffing, scan for hosts, found my 2 laptops and router, added the windows 7 as target 1 and my router target 2. started mitm arp poisoning, which was successful i can see connections to the websites i am accessing but it is still encoded.
Can anyone help please.
thanks
Alot of websites uses SSL on every page and not only login page.
As i understood it by editing ettercap.config this provided a solution to this as it mimicked the sites SSL certificate, if not is there a way i could use wireshark or something similar to read the information? i'm still new to all this so sorry if that is a naive question!