Author Topic: Ettercap and getting the visited websites in my local network?  (Read 1918 times)

0 Members and 1 Guest are viewing this topic.

Offline erogol

  • /dev/null
  • *
  • Posts: 19
  • Cookies: -3
    • View Profile
Ettercap and getting the visited websites in my local network?
« on: December 17, 2012, 02:11:50 pm »
I r to acquire web sites visited in my net by adapting the steps explained here but I cannot see the web site addresses on command line or the ettercap's console on ettercap's user interface. On ettercap I just see the DHCP packages going around with ACK responses and I cannot see any foreign http package when I run urlsnarf Is there any missing point on that tutorial or what can be the reason for that malfunctioning.


Here is the tutorial that I pointed: http://h4xors.wordpress.com/2012/07/17/ettercap/#more-686


Can u please help me if you have any experience on ettercap?
« Last Edit: December 17, 2012, 03:24:57 pm by Kulverstukas »

Offline Snayler

  • Baron
  • ****
  • Posts: 812
  • Cookies: 135
    • View Profile
Re: Ettercap and getting the visited websites in my local network?
« Reply #1 on: December 17, 2012, 02:22:02 pm »
Yeah, the guy who wrote the tutorial forgot to mention that you need to edit /etc/etter.conf and uncoment iptables command.


Also, are you using wireless or ethernet for the attack?
« Last Edit: December 17, 2012, 02:27:17 pm by Snayler »

Offline erogol

  • /dev/null
  • *
  • Posts: 19
  • Cookies: -3
    • View Profile
Re: Ettercap and getting the visited websites in my local network?
« Reply #2 on: December 17, 2012, 04:26:28 pm »
Yeah, the guy who wrote the tutorial forgot to mention that you need to edit /etc/etter.conf and uncoment iptables command.


Also, are you using wireless or ethernet for the attack?


Thanks for the answer.


I am on wireless. Does it matter?

Offline Snayler

  • Baron
  • ****
  • Posts: 812
  • Cookies: 135
    • View Profile
Re: Ettercap and getting the visited websites in my local network?
« Reply #3 on: December 17, 2012, 06:08:16 pm »
I am on wireless. Does it matter?
Yes, it does. If you follow that tutorial, you'll end up arp poisoning the whole network, since you're not specifying targets. Your wireless adapter won't be able to receive and forward all the packets to their correct destination, causing slow connection on the victims, or even DoS. From previous experience, I can say you can arp poison one host + gateway at a time while using wireless adapters, and even then, the victim's connection will slow down a bit. With wired connection, I've never had any problems. I once arp poisoned a whole network (10 hosts) and everything went well. No DoS, no slow connection on the victims, every packet passed trough my computer without any problem.

If you're using wireless, and in order to limit your targets, once you get to the hosts window, just select a host and click on "Add to target 1" and then select the gateway and click on "Add to target 2".