Using Ettercap to Sniff SSL Passwords Like Facebook

We will be sniffing passwords over SSL using ettercap --- a few changes must be made to the /etc/etter.conf file before we begin lets look at the file.

The UIDs must be set to root as opposed to nobody in order for the program to have the correct Priv to run. 0 is the uid for root.

Also we must enable ip_tables forwarding of SSL traffic for it to be seen in ettercap. These 2 lines were commented out remove the comments and save the file.

Lets look at the victims arp table before we poison

Target 1 is your Victim // Target 2 is the default gateway of subnet.

Now lets head back over to the victim and first look at his arp table we should see that he thinks the mac of my box is now the mac of the router meaning L2 traffic that is destined for the L3 address of the router will go to me!!

Good now lets enter a password into a website


pwnd!


Thanks !!!!

to be used for educational purposes only!

Category:

Education

Tags:

• hacking
• ettercap
• ssl

[zhiyan94]

Very thanks , u are the real hacker than the title with 100% hack facebook

[muman212]

nice tutorial, however on my victim machine it always says : connection not trusted and that i should leave this site....what can i do ?

[CJfallen]

@hellofraz1 if your running in a normal user type sudo gedit /etc/etter.conf (if your root leave out sudo) into the terminal and you should be able to change the privs to 0 and save at the top by file and then save

[insomniac392]

@IhackIapplephone The unmixed version is called "Lux Aeterna" and is by The Kronos Quartet. It is sometimes called "Requiem for a Dream" since it was the most popular piece of music from the soundtrack of the movie "Requiem for a Dream" (excellent book and movie BTW).

[thewariomanofdoom]

@IhackIapplephone The name of the song is dream for a requiem. Though the one he is playing is a remix of it.

[AVAL0NIX]

PWND by a genius like nugsolot! =)

[IhackIapplephone]

What the song please :p ?

[hellofraz1]

after you have edited the /etc/etter.con script how do you save it?