Results 1 to 7 of 7

Thread: Detecting Network nodes w/ Cain

  1. #1
    Junior Member
    Join Date
    May 2007
    Posts
    3

    Detecting Network nodes w/ Cain

    Big picture:

    3 PCs(A, B, C)
    All connected via DLink Wireless Router
    A is running a server (java process). Tank Simulation Module
    B is running a client (java process). Tank AI.
    C is running Cain.

    Ultimate goal: Communication between A nd B needs to be modified. I would like to have control over what is sent to the server(A) from B. This could include MITH attack with APR.The data is XML. I'm decent on the Java side so I could write a parser which would handle the modification of the data from B to the server during the MITM attack.

    Current problem:

    Installed Cain on PC C. Clicked on "Sniffer" tab. Clicked on "Add to List". Clicked OK on the "Add MAC Address" window. Used defaults(192.168.0.1 is my routers IP), and nothing is found. I connect to the Router(via browser) and notice PC C(192.168.0.101) and PC A(192.168.0.102) in the Routers "Client List"(PC B is getting a fresh OS install as I type). Point is, I would think Cain should pick up the router and PC A.

    Any help would truly be appreciated.

  2. #2
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Cain can be 5 kinds of flaky on wireless, depending on what card/chipset you are using. If you want to modify the content, you may want to look into using Ettercap filters instead.

  3. #3
    Junior Member
    Join Date
    May 2007
    Posts
    3
    Thanks for the direction.

    I've installed ettercap and seem to have the same problem of not being able to detect any hosts while performing a scan of the subnet. My non-educated guess is either the network card capabilities or an ettercap configuration issue. I can ping both the wireless router and PC A. Thoughts?

    BTW, the filter is exactly what I was looking for.

  4. #4
    Junior Member
    Join Date
    May 2007
    Posts
    3
    Update: When I physically connect to the wireless router I can see the other nodes on the subnet. Seems to be specifically connecting via wireless.

  5. #5
    Senior Member
    Join Date
    Oct 2003
    Location
    MA
    Posts
    1,052
    I never had a problem with that when I was on wireless. As long as they are on the same subnet it should be able to see it fine. I would try installing/reinstalling the newest copy of winpcap since that is the library that is used for both of those programs I believe.

  6. #6
    Junior Member c1cer0's Avatar
    Join Date
    May 2007
    Location
    127.0.0.1
    Posts
    2
    I had this exact issue and discovered that the wireless interface needed to be set within cain to not run in promiscious mode under the part where you select the interface to run on. It can be disabled by unchecking the box.
    Give that a shot, it was instant for me (worked straight away after disabling it). Hope this is what you were looking for.

  7. #7
    Senior Member
    Join Date
    Oct 2003
    Location
    MA
    Posts
    1,052
    I guess it depends on your card then. I just had a cheap linksys usb b card. It supported promiscuous mode I guess.

Similar Threads

  1. Trojans - Ports
    By GbinaryR in forum AntiVirus Discussions
    Replies: 11
    Last Post: October 30th, 2008, 09:33 AM
  2. Secure your wireless network
    By DeadAddict in forum The Security Tutorials Forum
    Replies: 10
    Last Post: July 21st, 2008, 12:16 AM
  3. Hijackthislog What files to delete?
    By dantesheaven in forum Spyware / Adware
    Replies: 9
    Last Post: October 24th, 2004, 01:49 PM
  4. A look into IDS/Snort Whole thing by QoD
    By qod in forum The Security Tutorials Forum
    Replies: 6
    Last Post: February 27th, 2004, 03:03 AM
  5. Network Scanning Policy - Template
    By thehorse13 in forum Network Security Discussions
    Replies: 5
    Last Post: June 1st, 2003, 02:03 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •