IEFD Ep. 20 - Ettercap - Part 1 of 6

[yashuvishnalia]

how will i use ettercap for class A ip addresses...because it crash in midway or it will take very very longtime in BT5

[proUnleash]

I got a problem, my friend who is a dick is on the same hamachi network as me, but when am scanning for hosts the program crashes.. what to do ?

[RussellHallmark]

Hi! Thanks for the video... very helpful. i have one question that seems to be unanswerable everywhere else though. I have Ubuntu 10.10 and i am downloading the newest version of ettercap with the 'ubuntu software center' and when i go to scan for hosts it scans and then closes the program. no matter how i boot the program it always does this. (i did get it to work once, but then it went right back to closing afterwards)??HELP???? what can i do??

[davywavy1971]

Hello. I have Ettercap working on Win XP. I can detect all interfaces on my WLAN and set the targets but when I try to poison nothing happens. No messages at all and if I start sniff also nothing. Any ideas anyone?

[kirtandalia]

Hi guys, I've been trying to work this out...but somehow it doesn't. I m using backtrack 4 R1 and winxp in VMware for this. when i start sniffing it works well...but when i use xp to log in my yahoo....i can log in there successfully....but in linux machine.....it doesn't show me the way u showed in this video tat it should.....i can't figure out wat went wrong....it sniffs well...captures other packets tat i can see through connection plugin....but this password thing is not showing up.....help

[DuarteOnTheLine]

In the menu doesnt appear "Host's" (same version of the software..:S)

btw nice vid

[miekmuse1exploit]

lol bob and bobi

[enbay]

Hey when I open Ettercap and try to sniff, I don't have a network interface listed. Do I have to type it in myself, or is the software just not detecting the interface.

Thanks, great videos, just what I what I was looking for.

[rlowe1980]

@enbay

Make sure your networking service is turned on. BackTrack 4 has it disabled by default. Use this command to enable it:

/etc/init.d/networking start

i beleive thats the command. Someone correct me if I'm wrong. I'm a newbie too.

[ayoubtidjani]

@rlowe1980 you can use start-network

[octopuzt]

ASU BUNTUNG !!

[sNaYkE15]

used this in my chemistry class yesterday when a bunch of people had their laptops out.....pwned everyone

[yenomeerf]

@sNaYkE15 Hows your Chemistry score?

[sNaYkE15]

@yenomeerf lol ^_^

[sNaYkE15]

idk why the rest of you guys are having sound issues.....I can hear perfectly and I don't have my volume turned up loud at all. I just have ear buds...

good vid guys!! :)

[robostiffy420]

Does it bug anyone else that they keep saying ethercap and not ettercap?

[roscoejcollins]

would of watched it but cant hear ya sorry moving on to the next

[MCSpidah]

Please will you start speaking up ,your video's are great but I really struggle to hear you .

[l3m0np13]

@MCSpidah plug some headphones in :P

[AtheismandSkepticism]

mine didn't pick up the Youtube passwords.

is it because i didn't sniff remote connections?

[belkeSMASH]

is it possible to sniff passwords with only a wireless laptop, like lets say im on a laptop near a desktop computer, would i be able to do this if i were sitting maybe 20 ft away hooked up to their wireless internet? because LAN is different then just plain wireless.

[Cotboy]

If you are connected to someones network vis wireless you are in their LAN. What kind of crack are you smoking? LAN just stands for Local Area Network. Wither you are a wired or wireless connection you are still in the LAN.

[belkeSMASH]

to answer your first question, it's Columbian Frost Sugar, made in the mountains of Columbia, and sometimes Cuba. anyways, yes, i figured that out litterally 5 minutes after commenting. i had a giant brainfart due to the amount of cocaine i've consumed that morning.

[MCSpidah]

I can't see how ,if your still connected to the network.

[machoo85]

thanks for the great vids, appreciate the efforts.

prob i have is that i use windows vista, n apparently nothin seems to work on it, im not a linux fan n dont wanna screw up my pc with another os. so is there any solution or program that could run fine on vista??

[chris47watson]

cain and abel can do arp poisoning too, but its also a MAJOR script kiddie program.

if you want to get into hacking, you're gunna have to learn linux...sorry lol

[Kj3k53]

get a live cd of backtrack ;)

[belkeSMASH]

this wont answer your question but ive been hearing alot about this not working on vista, now, at my other house i have vista that i have not ran backtrack on yet, can you tell me exactly what problems your having so i know what to expect?

[alexibility]

I'm using a netgear router.

ettercap outputs:

Activating chk_poison plugin...

chk_poison: Checking poisoning status...

chk_poison: No poisoning at all :(

[alexibility]

I got it. I must click Start Sniffing and run chk_poison. :)

[CsSk8vsGuitar]

LOL big LOL man xD nice point... thx

[PILMAN]

Would this be possible on an encrypted pseudonomys overlay network or Freenet for sniffing traffic? A numer of these networks admit that there are threat models for man in the middle attacks although they use encryption (AES 256 bit) with users acting as tunnels/circuits to relay information. How about TOR? I'm not interested in getting information but merely if it's been done with this software before?

[SuperMulatt]

I'm getting this message!:(

what can the problems be? i'm conected through wlan.

trying to get info on another computer on the wlan network

activating chk_poison plugin...

chk_poison: Checking poisoning status...

chk_poison: No poisoning at all :(

[alexibility]

click Start Sniffing and run chk_poison.

[ipen5]

how do i install ettercap in linux, i have never used linux before and have installed a live cd on a usb so i can boot into linuxmint 6, instead of booting into windows vista, and so far it seems a lot stabler than vista is and a lot faster at processing stuff.

[alexibility]

type this in the terminal:

sudo apt-get install ettercap ettercap-gtk

[Xnazel]

Great Vids!

I just have one problem, when ever I use arp Poisoning the victim ( my other computer ) cannot access the internet at all. When i used cain and abel, the speed of loading is really slow but still gets there. Anyway to solve this problem?

[Gregorpm]

Yes, use linux.

[joseurdaddy]

Question???

++++PLEASE RESPOND++++

ENCRYPTIONS = random stuff to protect your files

HACKER = gets your passwords and everything on your computer

THE QUESTION???

Is there any point to encrypting your files because if your HACKED wont the hacker just get the password for the ENCRYPTED files???

SO WATS THE POINT OF ENCRYPTION

++++PLEASE RESPOND++++

[pokerstud001]

ok, well i googled ettercap download, and got it, but when i downloaded it all it was was a bunch of files, and no program to use them! help please?

[Gregorpm]

you probably downloaded the linux version. You want to download the "unofficial binaries" windows version from sourceforge

[pokerstud001]

could you tell me where that is? :)

[pokerstud001]

oh ok, i downloaded and installed, but when i ran the program it said packet.dll was not found. ?!?

[pokerstud001]

oops sorry, it said i needed winpcap, i got that, it worked fine now, thanks!

[pokerstud001]

Ok, now i have a serious problem. When i run the host scanner, this is what it says below:

Randomizing -1 hosts for scanning...

Scanning the whole netmask for -1 hosts...

0 hosts added to the hosts list...

help people! huge dillema! :'(

[fraguzz]

how come my ettercap says: "no poison at all" but when i check "arp -a" on the target computer my computer has the same MAC as my gateway..

but still i cant get passwords from youtube / hotmail etc only forums and like that.??

thanks for a great collection of guides will watch them all!

[alexibility]

create a filter that deletes the "Accept-Encoding: gzip, deflate"

compile and load that filter.

compile load the etter.filter.ssl filter.

That's what I did and I get all entered account information on different sites like youtube, gmail, yahoo, facebook, etc.

[aviteck]

Nice video. It was very informative and straight to the point. thanks

[stanni1992]

Great vid guys but I have a problem. When I've turned on the ARP poisoning and started sniffing, both the attacker and victim pc's are unable to access any internet site even though they both say they are connected to the internet still.

Both machines are running vista btw, and ettercap is running from backtrack2 in VMWare.

Thnx, Stanni

[Gregorpm]

Don't use VMWare. You are probably getting a DoS because VMWare is unable to forward the packets quick enough. Either try just targeting one computer or use the BT LiveCD.

[TheRealSlimStephen]

@Gregorpm

I can't tank you enough for making this Vid!

Thanks to you I found out that my LAN is being poisoned. What exactly am I supposed to do after I find this out??

[fenec860]

thanks guys

[magick205]

Great video guys. Is this tool included in the Backtrack2/3 release, or is this a seperate tool that I'll need to compile myself?

[Gregorpm]

Ettercap is included in Backtrack

[eddeathonation]

Excellent as always!

[Steve0292]

first reply!

[rodferro]

OMFG! LOL