Ubuntu Dark Arts: Hacking Networks With Ettercap To Gain Usernames And Passwords

SOURCE:http://www.zimbio.com/Runescape+Hacks/articles/3164/Ubuntu+Dark+Arts+Hacking+Networks+Ettercap
-----------------------------------
Ettercap is a program that can accomplish many things, most notably gaining usernames and passwords from networked computers. For example, let's say you think your husband or wife is carrying on an online relationship with somebody and you want to gain access to their email or social site accounts. With ettercap, you can do just that.

First, you need to install ettercap. From the command line type in this:
sudo apt-get install ettercap-common ettercap-gtk

Before running ettercap you will need to modify the config file to allow for SSL access. Some other guides state to edit the file located at /usr/local/etc/etter.conf but my config file was not located there. I found mine at /etc/etter.conf. You have to uncomment the two iptables lines about iptables in the .conf file to allow for SSL access. So locate these two lines:

#redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp –dport %port -j REDIRECT –to-port %rport"

#redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp –dport %port -j REDIRECT –to-port %rport"

Remove the "#" before each line and save the edited file. Then go to Applications –> System Tools –> ettercap and follow this mini-guide to "sniff" your local network for usernames and passwords.

ettercap start screen

Go to Sniff –> Unified sniffing

ettercap unified sniffing

Choose your network interface (eth0, wlan0, etc.)

ettercap choose interface

Press CTRL+s to scan the network for hosts

ettercap scan network

Go to Mitm –> Arp poisoning

ettercap arp poisoning

After selecting arp poisoning, then check the box "Sniff remote connections"

ettercap sniff remote connections

Finally, select Start –> Start sniffing to start the sniffing for usernames and passwords

ettercap start sniffing

This works out quite nicely if you have everything set up right. I have tried this out and can confirm that it does indeed sniff out usernames and passwords. When someone on your local network goes to a website where they need to log in to gain entry, such as Yahoo Mail, then immediately after they log in to the site, the website url, username and password will be listed in the ettercap terminal. Pretty cool, huh?

Just to be on the safe side I will just say that this guide is for informational purposes only; it is not my intention to have anyone read this and head off to a local coffee shop and try to hack everyone's accounts!