[MsMittens]

Some of you might not have played with Ettercap in the past. It's a MITM/hijacking tool. Very interesting but a tad noisy on the ARP side. It can be a good learning experience into how weak some protocols really are.

Fairly recently updated, EttercapNG is out. You will need an updated libpcap (version 0.8.3 should be fine -- has to be greater than 0.8.1) and libnet greater than 1.1.2. Don't forget OpenSSL if you want HTTPS and SSH1 support.

Just as a side FYI, when installing libpcap, I had to copy a version from /usr/local/lib to /usr/lib so if it is having errors trying to find libpcap do a whereis libpcap and then do a strings on each libpcap.a file location.

Addendum

Ettercap ended up in /usr/local/bin/ rather than /usr/local/sbin. Either copying it over of creating a link should do the trick. The Interface has changed. You now can choose between ettercap -t for a text/CLI interface, ettercap -C for a nCurses interface or (NEW) ettercap -G for a GTK interface. Definately need a read of the man pages for the vast changes they've done with this tool.

Happy Sniffing!

[manu]

Thanks Msmitten.. Thanks for the info..
Manu

(Manu, I owe you a slap for this THANKS post....) BN :angry:

[dudicus]

Excellent Ettercap is a good program for MITM attacks and is most importantly opensource

[ssj4conejo]

Lovely tool. It really rocks on live cds. i've had so much fun with ettercap.. its also a good way to keep an eye on your home network remotely = )... THe ncurses is lovely! :blink: :ph34r:

[ANORIUS]

ettercap NG 0.7.2 has been released!! 21.12... a xmas present :D