Comments on: Ettercap Filters with Metasploit browser_autopwn

By: Defensas frente a ataques DHCP | Security Art Work

Defensas frente a ataques DHCP | Security Art Work — Tue, 17 Apr 2012 10:25:59 +0000

[...] Con el paso del tiempo me he dado cuenta de que este tipo de situación es bastante frecuente: es realmente difícil encontrar una empresa que tenga en cuenta políticas de configuración estrictas para asegurar un entorno local. Personalmente pienso que muchas organizaciones no son conscientes del daño que podría hacer un empleado descontento en un entorno local “poco controlado”. Sin llegar a utilizar herramientas sofisticadas como Loki o Yersinia, es posible desde tirar toda una red con apenas un par de paquetes y con ayuda de Scapy, hasta hacer MitM usando ARP / DHCP / VRRP / HSRP o hasta cosas mas entretenidas como conseguir un pool de shells sin mucho esfuerzo con el browser_autopwn de Metasploit y etterfilters. [...]

By: Defensas frente a ataques DHCP « sanchezdiego.com.ar

Defensas frente a ataques DHCP « sanchezdiego.com.ar — Wed, 07 Mar 2012 15:25:23 +0000

By: 294v

294v — Wed, 29 Feb 2012 17:14:58 +0000

Sorry amendment. IP of target was incorrect but I still have the same problem.

This is the command i’m using

ettercap -T -i at0 -q -F /root/iframe.ef -M ARP /10.0.0.11/ //

Cheers

By: 294v

294v — Wed, 29 Feb 2012 17:05:31 +0000

Great tutorial but after i run this command

ettercap -T -i at0 -q -F /root/iframe.ef -M ARP /10.0.0.1/ //

it freezes all traffic. 10.0.0.1 can’t view any websites…

Any ideas?

By: gabo

gabo — Wed, 15 Feb 2012 16:29:07 +0000

Hey, i’ve tried a few filters, a simple img replacer, and a few other. I put a msg(“Filter OK.\n”) when the filter works, but nothing happens, i do ARP poison the entire lan with it, but nothing happens… i guess that any etterfilter works here, any thoughts?

all of the plug-ins work well. i’m on ArchLinux and Kernel 3.2.6-1

By: mekix

mekix — Mon, 28 Nov 2011 20:54:59 +0000

Good! this is like SET(Social Enginier Toolkit)? in one of options allow something likeness, thank you for you time and this beautifull papper

By: Hack all the world - Open Penetration Testing - Focusecurity.Org

Hack all the world - Open Penetration Testing - Focusecurity.Org — Sat, 18 Jun 2011 03:33:17 +0000

[...] http://www.hackyeah.com/2010/10/ettercap-filters-with-metasploit-browser_autopwn/ [...]

By: Trenton

Trenton — Mon, 10 Jan 2011 22:41:08 +0000

Good catch. It is now fixed, and I gave you credit at the end of the post. Thanks!

By: t3h3v1lh4x0r

t3h3v1lh4x0r — Mon, 10 Jan 2011 21:14:48 +0000

BODY is not quoted correctly