Author Topic: Need help with ettercap  (Read 1147 times)

0 Members and 1 Guest are viewing this topic.

Offline AcidHead

  • /dev/null
  • *
  • Posts: 6
  • Cookies: 2
    • View Profile
Need help with ettercap
« on: July 13, 2014, 12:43:51 pm »
Hi everyone, i've been trying to do DNS spoofing on my LAN but i have many problems with ettercap....

When i start ettercap in GUI mode select uniffied sniffing select my wireless interface and try to scan for hosts ettercap only finds my router not the target laptop i'm trying to DNS spoof, so i manualy go to Targets/Select TARGET(s) and enter both the router and target than when i try to check "MiTM/ARP Poisoning.../Sniff remote connection" it checks it i click OK and when i go again in "MiTM/ARP Poisoning.../" it's not checked!!

So i ty the text mode:
sudo ettercap -T -M arp:remote -i wlan1 -P dns_spoof -P chk_poison ROUTER_MAC/ROUTER_IP// TARGET_MAC/TARGET_IP//

in which case i have to enter the targets MAC and IP for ettercap to find them but ARP poisoning still doesent work, so i use chk_poison plugin:

chk_poison: Checking poisoning status...                                                                                                                                                           
chk_poison: No poisoning between 192.168.1.6 -> 192.168.1.1

I have changed the UID and GID to 0 in the etter.conf file and removed the '#' in the iptable section..
i use Kubuntu 14.04 amd64 and have completly disabled my firewall...

any help would be appreciated :')

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Need help with ettercap
« Reply #1 on: July 13, 2014, 01:10:43 pm »
Hi everyone, i've been trying to do DNS spoofing on my LAN but i have many problems with ettercap....

When i start ettercap in GUI mode select uniffied sniffing select my wireless interface and try to scan for hosts ettercap only finds my router not the target laptop i'm trying to DNS spoof, so i manualy go to Targets/Select TARGET(s) and enter both the router and target than when i try to check "MiTM/ARP Poisoning.../Sniff remote connection" it checks it i click OK and when i go again in "MiTM/ARP Poisoning.../" it's not checked!!

So i ty the text mode:
sudo ettercap -T -M arp:remote -i wlan1 -P dns_spoof -P chk_poison ROUTER_MAC/ROUTER_IP// TARGET_MAC/TARGET_IP//

in which case i have to enter the targets MAC and IP for ettercap to find them but ARP poisoning still doesent work, so i use chk_poison plugin:

chk_poison: Checking poisoning status...                                                                                                                                                           
chk_poison: No poisoning between 192.168.1.6 -> 192.168.1.1

I have changed the UID and GID to 0 in the etter.conf file and removed the '#' in the iptable section..
i use Kubuntu 14.04 amd64 and have completly disabled my firewall...

any help would be appreciated :')

Wireshark holds the awnser my brother
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline AcidHead

  • /dev/null
  • *
  • Posts: 6
  • Cookies: 2
    • View Profile
Re: Need help with ettercap
« Reply #2 on: July 13, 2014, 02:26:40 pm »
Yes i thought of using wireshark to get a better look, but i'm a bit of a noob with it :P but i will definitely try to use it to get a better appreciation of what's going on and post anything that could be usefull...

Offline AcidHead

  • /dev/null
  • *
  • Posts: 6
  • Cookies: 2
    • View Profile
Re: Need help with ettercap
« Reply #3 on: July 13, 2014, 05:12:06 pm »
everything seems alright, i'm sending packets from my MAC to the targets and routers MACs, the only strange thing is it seems like i'm sending way more packets to the target than the router like 10 times more... is there something specific that i should look for?