2tDUrRtm

1Network Attacks with Ettercap
2-----------------------------
3Network Attacks: There are two types of network attacks.
4
5Active Attacks :In this type of attack target the physical device in such a way so that we can halt the communication and perform the damage and distruption on the network communication.
6For Example: DOS attack on Local Network Router.
7
8Passive Attacks: In this attack we perform actions on the packets released by the device in the air hence all the attack vector is deployed after the dispatchment of packets data by the device over the network.
9
10For Example: MITM (Man in the middle attack)
11
12Protocols vulnerable to MITM
13----------------------------
14HTTP
15FTP
16SMTP
17VOIP*
18POP3
19SIP
20and more...
21
22Requirements
23-------------
241. OS: Kali Linux (below 2.0)
252. Ettercap -G (GUI Version)
263. Network Connection
274. Victim Machine: Any OS 
28
29DNS Spoofing
30------------
31Step 1: locate etter.dns
32Step 2: www.gmail.com  A  127.0.0.1
33        *.gmail.com    A 127.0.0.1
34
35Step 3: Scan and select list as same
36Step 4: Plugin --> Manage Plugins, Select dns_spoof plugin from the list.
37
38
39Victim IP address : 192.168.225.39 (Mac OS)
40XAMPP Server IP : 192.168.225.35
41
42
43SSL Strip Pre Settings
44-----------------------
45 cat /proc/sys/net/ipv4/ip_forward * (Backtrack R3)
46
47 iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 100