Displaying websites other people on your network are viewing in realtime.

This is just a quick video since i just got this working and im still messing around...basically you can view every website someone else on your network is viewing...
This is all done with nothing hooked up between the two computers as long as your both connected to the same network.
The computer your viewing has no way of knowing your viewing them since this is all done from your computer and you dont even need any access to the computer you want to view.

The computer im using to view is running ubuntu 9.10 and the computer im viewing is vista.
This was done using ubuntu with webspy and a few other commands to route the network traffic.

Category:

Science & Technology

Tags:

• Ubuntu
• Linux
• 9.10
• karmic
• koala
• vista
• xp
• mac
• apple
• windows
• tux
• the
• pengiun
• 2600
• haking
• network
• view
• crack
• spy
• webspy
• fragrouter
• arpspoof
• firefox
• wireless
• security

[roejames12]

Bravo. I just accomplished this very task also not that long ago. Do you have any idea on how to do this to a whole subnet, or more than one IP? If it's even possible. Arpspoof was the most confusing for the longest time.

[mastrpwnage]

I dont know how to do this over multiple ips. I was wondering the same thing though.

The way ive done it is im just basically intercepting the data going from one ip to the router ip then it just re routes it back to my computer. I used arpspoof, webspy, and fragrouter...maybe theres more in webspy to let you do that, i dont know to much about it. Ill mess around with it again tonight and see if i can figure anything out, im still having issues with ads displaying in their own windows.

[mastrpwnage]

Heres exactly what i did... I open 5 seperate terminals // sudo arpspoof -i wlan0 -t 192.168.0.1 192.168.0.104 sudo arpspoof -i wlan0 -t 192.168.0.104 192.168.0.1 sudo fragrouter -i wlan0 -B1 sudo webspy -i wlan0 192.168.0.104 firefox & // 192.168.0.1 being my router ip and 192.168.0.104 being the target ip it took me the longest time to get fragrouter to work, for the rest i just installed the dsniff suite

[GradyBaby13]

???

[DABS139]

Could you explain to me exactly how this is done? Please reply!

[roejames12]

Ya. That's what I have to do next. Webspy is good, but it'd be even more damaging with a session stealer. I'm looking to up my knowledge on stealing peoples sessions also, not just sniffing through packet data for interesting bits like URL's. Let me know if you find anything useful.

[mastrpwnage]

Yeah that was the issue i was having with webspy is there was still lots of sites that werent showing up properly...Sniffing for ips isnt too hard...i dont know much about this, ive only been running linux for 6 months. The only other thing is, if someone logs onto a site you cant view any of that because they have their own session id...so if you were to pair this up with an xxs cookie stealer you could really do some damage, but im just doing this for proof of concept.

[roejames12]

Oh, and I forgot to say. Webspy is a good tool, but it needs to filter out the IP's to their Domain Name. Lots of sites won't work unless you use the Domain Name, I found this out myself. This, and the tool misses quite a few URL's unfortunately, and it doesn't work too good with Firefox and tabbed browsing. Luckly these are always open source, I look to edit the source code sometime for more protocals, better detection, etc. Not just webspy, the whole dsniff packages, or at least most.

[roejames12]

Right. I enabled IP forwarding in my kernel, so that eliminates one less command (fragroute). These MiTM attack work of course, I just wish I could do more than 1 IP. I figured this. Take the interface into monitor mode, sniff out only open AP's, like a hotspot. I'm gonna use Wireshark to see if the data actually gets through on open. If so, then you would essentially be sniffing all IP's connected to the router. That's the best I can come up with though... Not 100% sure if it will work.