ettercap remote browser plugin, 260 tabs in firefox

[Thunderbirdboy]

I have been playing with ettercap the last few days and have configured the etter.conf like this to work with the remote-browser plugin:
[privs]
ec_uid = 0
ec_gid = 0

and:
remote-browser = "firefox -remote openurl (http://%host%url)"

To start the attack:
ettercap -T -Q -M arp:remote -i eth1 /client-ip/ // -P remote_browser

Everything works great but maybe alittle bit to much
All googleads and links to pics on the sites open on the remote browser is opend in a new tab in firefox.
On my first try I opend 1 site on the remote pc and 260 tabs was opend on the clientside firefox.

Dose anybody know of a way to limit the remote-browser-plugin to only open the sites that a actually opend remotely?

[.lonewolf]

This thread should have your answer
http://forums.remote-exploit.org/showthread.php?t=6654

You can also try here:
http://66.102.9.104/search?q=cache:8...lnk&cd=3&gl=za


I think it says... turning off the open new tab option in firefox works...

[Thunderbirdboy]

Thank you for answering so fast.
I see the problem mentioned in both threads but not the solution. It was actually from those posts among others, I got started on ettercap.
Disabeling the "new tab" in firefox just makes it open new windows instead.

[.lonewolf]

Enter about:config in the Firefox address bar.

Find this string and change the value to 1 and see if that helps.

browser. link. open_newwindow

[Thunderbirdboy]

It dosn't seem to change anything!

[.lonewolf]

I'm not sure but you may have to restart Firefox for the change to take effect, if you haven't already.

Otherwise look here for other possible solutions.
About:config entries - MozillaZine Knowledge Base

[Thunderbirdboy]

I did restart and I also tried a few other settings in about:config. Can't make it work.
Looking at the output from ettercap almost all the ekstra pages come from: hxxp://pagead2.googlesyndication.com/........
If i could somehow ad something to the line in the etter.conf about the remote-browser, that made it ignore all pages starting with "pagead2" it should take away must of it.
Right now it looks like this:
# the command used by the remote_browser plugin
remote_browser = "firefox -remote openurl(http://%host%url)"

[.lonewolf]

These may help
http://forums.appleinsider.com/showthread.php?t=70784
https://addons.mozilla.org/en-US/firefox/addon/3145

[Thunderbirdboy]

Well it was a bit optimistic of me to think I only had to block that one site. different sites have ads and pics from different places offcourse.
So it didn't work! I would have to block a very big amont of sites.
But I do like the siteblocker adon for firefox. Even this forum looks a little bit better without the googlead.

[.lonewolf]

Perhaps this is better. Apparently it doesn't take long to build a list of filters.
https://addons.mozilla.org/en-US/firefox/addon/10