I can not manage to get any passwords on my network with Ettercap.I have followed several tutorials but I still seem to have no luck in getting them.I have BT5/KDE/32bit installed and using an alfa network adapter (RTL8187).First I configured etter.conf script to look as below:
ec_uid = 0 # root is the default
ec_gid = 0 # root is the default
# the command used by the remote_browser plugin
I used to have ettercap on backtrack 4 and everything was ok...But on ubuntu 10.04 I'm having this issue; it is not showing passwords (if i log in for example in a forum with a http link )and not sending false certificate (if i try to log in in https links, after uncommenting the redir ip tables in etter.conf).Other features seems to work alright (such as dns spoofing) and the arp poisonning is succesful. Besides, Wireshark gets the passwords.
I have been playing with Ettercap on my home network, learning about packet forwarding and all such things. Recently, after doing some certificate stuff, Ettercap is performing the SSL attack where it sucks out the password of a user after it issues a fake certificate. How do I turn off the SSL attack in ettercap when I'm not interested in SSL information?
I wonder if it is possible to have two passwords for one user account in 9.10. I have a long login password (5 words about 45 characters with spaces caps). I would like to set a shorter password for Authentication, sudo, etc. While retaining the original for logging in.In short:Have long password to login to computer.Have short password for everything after login.
I am quite new to Linux. Just some basic information, I am using windows xp but have installed vmwork station and am running Red Hat enterprise linux 4.
When i run ./configure it gives me this error. "configure: error: libnet >=1.1.2.1 not found "
I goggled a lot on how to get ettercap working on ubuntu, but unfortunately wasn't able to find anything good. So, i decided to make a new post about it.
1. The GUI mode crashes after scanning for hosts.[ Fixed by downloading the version by timothy]
2. After Scanning, When you start Sniffing, and run the chk_poison plugin it says no poisoning at all . Why, i am not able to poison it at all?
3. Running the original ettercap in text mode(-T), also gives the error , if you uncomment the two lines required for SSL sniffing, then you are met with error saying that you don't have enough permission to and suggest that i should either upgrade iptables or my kernel[I am sudo]. O.o?
for dns spoofing in my local network (one laptop and a router switched), but that does not work. An access to a specified site does not redirect.If you need any details, The command I use is:
I am not a Linux user but and learning about it in a class and thought I would check it out. My teacher said that two linux users cannot have the same passwords but never explained why?
I am using fedora 13 and have installed ettercap from Add/Remove Software in Fedora. But when it is starting(Application->Internet->ettercap), it is not able to detect any interfaces ( i am using eth0 interface, wired lan ).
My Host Lists of Ettercap is empty when I try to sniff my Lan. I modified /etc/etter.con, obtaining this:
Code: # if you use iptables: redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport" redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport" and the error is this:
Code: iptables v1.4.6: can't initialize iptables table `nat': Permission denied (you must be root) Perhaps iptables or your kernel needs to be upgraded. I lunch ettercap as root.
I have installed ettercap using apt. But, when I scan for hosts, Ettercap crashes. I've found on the Web that there's a solution, but I don't manage to solve this problem.
I am using fedora 13 when i am starting ettercap, i get following warning and when i clicked "scan host" , the program quit after scanning hosts due to some segmentation fault...here is warning
Code:
[piyush@localhost ~]$ sudo ettercap-gtk ettercap NG-0.7.3 copyright 2001-2004 ALoR & NaGA (<unknown>:2315): GLib-GObject-WARNING **: gsignal.c:3079: signal name `depressed' is invalid for instance `0x9f9ee00'
I use Ubuntu on my netbook, which I uses for browsing and email. It's way faster than the Windows which came on the machine. That's a nice feature, as is the price.
I like it except for the constant, perpetual, ever-present, super-annoying need to be entering passwords and "becoming root user" and so on. I am the only one using this appliance. I don't even care if someone steals it, really. There must be some way (I hope) of disabling this idea that I am a CIA agent with TopSecret materials.
I just want a simple, easy to use appliance. If not Ubuntu, is there any distro that is aimed at normal people?
I mount my Fedora AMI on my EC2 account, when I reboot the system, the passwords for ec2-user and root are changed.On the web I found that is a "feature" .
I downloaded and installed hundreds of KDE and GNOME programs yesterday evening. A password was called for and rejected because it was too short. A new password was provided but it was not written down or saved on anything. I am now locked out of linux for want of a working passwd.There is a way to recover a lost password. Would someone please tell me what it is? I do not want to have to re-install everything again.
I'm trying to see regular http responses from my wireless ipad (victim) from my wired pc (attacker). Everything's working great but I can only see the http requests not the responses.
I've done much reading and googling and tried registering in more relevant forums but some forums were shutdown, so I've come here.
Code: # setup ip forwarding echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward # use ettercap to do the mitm using only mitm sudo ettercap --iface eth0 --text --plugin autoadd --only-mitm --mitm arp:remote /192.168.0.1/ /192.168.0.155/
How to I get linux to stop prompting me for a password and remember it? For instance, when using the root user, I always get prompted, but I would rather only be prompted once per user session.
I know one way is to enforce rules on the passwords, use at least one uppercase, lowercase, number, special character, and ensure that the password length is at least 8 characters, etc...
Is there an additional way to prevent weak passwords? I heard of "John the ripper". Has anyone successful applied that?
Is it possible to have multiple passwords on the same account, where one password allows only normal login and another only when accessing the machine remotely (for example, via ssh)?
Password strength in Linux can be ensured by setting parameters in /etc/pam.d/common-password file. But these policies apply only for non-root users, when they set password for themselves.s there any way to ensure strength of passwords assigned by root?Example: Normally root can assign passwords like "hello" "password" etc. Is there a way to ensure that passwords assigned by root must contain a special character and a digit as mandatory?
I'm configuring a CentOS 5.4 workstation. I have been able to apply most of the security that is required. I have met all but one logging requirement. How do you get the count of old passwords associated with users? I don't need to see their passwords just how many times they have changed them. I have set remember to 24 in the /etc/pam.d/system-auth file. I don't know where the file is that contains this information.
I am just wondering what encryption method the shadow file uses, so that I may be able to manually change it. I ask this because I am trying to make a web page that will allow people to change their linux password via a browser.
a client asked me to install ettercap on their linux gateway machine - two ethernet machine. I tried it in bridged mode, it but as soon as I start it, the traffic stops and no one can access anything. Did anyone ever succeed in running it on the gateway?