Sniffing Question

[Itssid]

Ok so i have a WEP protected wireless ap and a client is on (call it c1) so how can i sniff for cookies and passwords that c1 enters online? (because wifizoo and ettercap does not work on wep protected APs
thanks

[Archangel-Amael]

Ok so i have a WEP protected wireless ap and a client is on (call it c1) so how can i sniff for cookies and passwords that c1 enters online? (because wifizoo and ettercap does not work on wep protected APs
thanks

This has got to be the coolest thread I have had the pleasure reading on here!
I thought it was virtually impossible to come back from the idiots corner league. Guess you proved that one. Thanks !
And then you posted in the wrong section of the forums,
And to top it all off you asked a question that shows you have done absolutely no searching whatsoever.

Any way if you want to sniff the ap then just turn of your encryption and there ya go!

Also try the forum search feature it does help
or use google.
Hope that helps

[MaXe Legend]

Yeah, searching on these forums brings much better results

Maybe it would be time to read more about wifizoo? A shame
there's no manual entries in backtrack though i bet with some
searching you'll be able to find out what you need to do

[Itssid]

but wifizoo only captures cookies on unsecure networks.

[MaXe Legend]

Can't you set up wifizoo with f.ex. the WEP or WPA key then?
( i haven't looked if there's a command line but you can allways try --help)

[Itssid]

you should try since ill admit you have more skills than me!

[shamanvirtuel]

this is not a software bug related thread

please post in the good forum

and no it's the thread not the user that is sent to idiot corner but he's missing the nice avatar....LOL

[Itssid]

ok if you are done making fun of me can u actually help?

[SBerry]

"ettercap does not work on wep protected APs".. try connecting to it first!

[Itssid]

k i figured out ettercap andits awesome but i am having trouble doooing it in xploitz's method

1. Capture your network traffic while not being connected or associated to it..example

airodump-ng -w capturedata -c 6 --bssid APMAC ath0

2. run
airdecap-ng -b (bssid) -e (ESSID) -w (networks wep key) capturedata.cap

Example.....airdecap-ng -w 00A4E267184999BC25D27E2945 capturedata.cap

This creates a file named capturedata-dec.cap

3. Now open up driftnet...

driftnet -i lo (or ath0 or eth1 or wlan0 or whatever....lo is just the local loopback ethernet interface thats commonly used for this.

4. Now we're going to replay the data on the local loopback ethernet interface (lo). This gives us an interface to send the data on without actually sending it out over the air or on the local network.

tcpreplay -i lo dump-dec.cap

5. Now just sit back and view the data in driftnet


tcpreplay seems to work but i cant see anything in driftnet:S
any suggestions?