MITM/Fake AP test failing after a few mins

[Ikarian]

Hello-


I have a MITM attack set up in my lab using the sslstrip/ettercap/FakeAP/DHCP3-server script created by Em3rgency (similar to Easy-creds).

The attack runs fine for a couple minutes. I signed on with my iPhone and was able to test a login or two, which showed up in the log as it should. But after a little bit of activity, I get this:

http://i.imgur.com/5bZkTW7.jpg

After which, the AP is no longer visible from client computers, and traffic no longer flows through the fake AP (webpages won't load, no more data is logged).

I spent a fair amount of time googling this, and so far, I found mention that this error may refer to when a user forcibly terminates their connection on their end; that it's nothing to worry about. That doesn't appear to be the case here. I'm all ears(eyes) if anyone has any suggestions.

This is a stock install of BT5r3 KDE x32 on a VM. I have run apt-get update/upgrade, and that's about it. Any ideas? Thanks.

[em3rgency]

Thanks for giving my script a try, that error you are getting is will sslstrip right? Did you install SSLstrip? I have seen it before, it hasn't caused any noticeable problems for me. Do you have strong signal strength when connecting to your AP? When traffic stop flowing, it is usually a sign of dhcp3 server messing up.

[Ikarian]

SSLstrip is definitely installed. I'm willing to bet the problem is with dhcp3 server. That thing has been the bane of my existence for months. I'm going to do a few checks/updates and report back. Thanks for your help. By the way, your script is fantastic. Thank you for contributing to this community.

[X0rCode]

i recommend you to make the MITM manually tis will work very good

[Attassuff]

I congratulate, a brilliant idea