Ettercap hates running on my gateway.

Printable View

January 25th, 2008, 07:34 AM
ZombieFx

Ettercap hates running on my gateway.

Hey i am having a serious problem with running ettercap on a 2 nic gateway my issue is that ettercap cannot run with a filter.The manual states that ettercap takes over routing and disables kernel ip forwarding but it doesn't route the packets to the default gateway ppp0. Also with unoffensive mode i am not able to modify or replace html codes. Arp poisoning my lan with another box isn't the proper solution since it destabilizes the lan. Do we have any other easy to use packet injection tools that run on linux?

here are the interfaces i am working with:
eth0 Link encap:Ethernet HWaddr 00:04:7A:23:77:5C
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

lan0 Link encap:Ethernet HWaddr 00:41:37:E4:2B:C1
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0

ppp0 Link encap:Point-to-Point Protocol
inet addr:x.x.x.x P-t-P:x.x.x.xMask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
January 25th, 2008, 11:41 AM
SirDice

Doesn't work on ppp interfaces, yet...

http://ettercap.sourceforge.net/foru...highlight=ppp0
January 26th, 2008, 12:02 AM
ZombieFx

Quote:

Originally Posted by SirDice

Doesn't work on ppp interfaces, yet...

http://ettercap.sourceforge.net/foru...highlight=ppp0

Do you recommend any other tools i have tried nemesis and packit but their way out my scope of understanding and just too complex.
January 28th, 2008, 08:59 AM
SirDice

What are you trying to achieve?
January 28th, 2008, 09:23 AM
ZombieFx

Just trying to embed some javascript for all http requests
January 28th, 2008, 09:28 AM
ArPaNET

your messing around with Java and those tools are too complex? If you don't mind me asking, what type of applet are you trying to "embed"?
January 28th, 2008, 10:33 AM
ZombieFx

Quote:

Originally Posted by ArPaNET

your messing around with Java and those tools are too complex? If you don't mind me asking, what type of applet are you trying to "embed"?

Its not the payload thats complex but the mechanism that delivers it to all nodes who request pages from the web. Browsing ettercap's forum it looks like Alor hasn't really been working on updating to support multi nic devices.
January 28th, 2008, 11:06 AM
SirDice

Quote:

Originally Posted by ZombieFx

Just trying to embed some javascript for all http requests

How about using a proxy?
January 29th, 2008, 07:16 AM
ZombieFx

Quote:

Originally Posted by SirDice

How about using a proxy?

Ya that's probably what i might end up doing cause squid supports content adaptation(ICAP). Thx SirDice