ToolWar | Information Security (InfoSec) Tools: MITM

Juli (MITM) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="MITM Attack Security" border="0" height="305" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO8ISFmjA0ekD7MPO8ICWGwpqxp0xB5sjipk9sIvcZyXydEZ4YA3TdPy0DID6206FpnsQF94cYahJVQlvRI8mFhifxNHnoqQe8lRrQSzD1Nb0FulPIAmHltwTkMP-pCvxsLo32-8Gk8M3K/s1600-rw/Parasite-Attack-MITM.jpg" title="MITM Attack Security" width="640" /></div>
<br />
A simple automated perl script for MiTM ( man-in-the-middle ) attacks. <br />
<h4>
</h4>
<h4>
Requirements:</h4>
<ul class="task-list">
<li>Linux ( I tested it on Ubuntu 14.04 LTS )</li>
<li>Perl</li>
<li>sslstrip <a href="https://github.com/moxie0/sslstrip">https://github.com/moxie0/sslstrip</a>
</li>
<li>arpsoof ( from dsniff can be found here <a href="http://www.monkey.org/%7Edugsong/dsniff/">http://www.monkey.org/~dugsong/dsniff/</a> )</li>
</ul>
<h4>
Usage:</h4>
Script must be runned as a root user<br />

<ul class="task-list">
<li>
sudo juli.pl interface targetip</li>
</ul>
<b>Download:</b><br />
<b>Linux: <a href="https://github.com/em616/Juli" target="_blank">Juli.pl</a></b>

Juli (MITM) :: Tools

A simple automated perl script for MiTM ( man-in-the-middle ) attacks. Requirements: Linux ( I tested it on Ubuntu 14.04 LTS ) Per...

Fern WiFi Cracker (Wireless Security Auditing) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_r9FW3TnXSaixk_XdPQeulTjkmnrUgCEaSMttahhSYB74fXxI7yrdv1fpiOwsdke6A8UYl_jOglpFZZF0snnVewT3z3Er5LlcI-Roo6j-vtoGbv6kPZMrd9BUb6gl3IdqLt_Iqp2tDCCF/s1600/fern+wifi+cracker+toolwar.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_r9FW3TnXSaixk_XdPQeulTjkmnrUgCEaSMttahhSYB74fXxI7yrdv1fpiOwsdke6A8UYl_jOglpFZZF0snnVewT3z3Er5LlcI-Roo6j-vtoGbv6kPZMrd9BUb6gl3IdqLt_Iqp2tDCCF/s1600-rw/fern+wifi+cracker+toolwar.png" /></a></div>
<div style="text-align: justify;">
<b>Fern Wifi Cracker</b> is a <b><i>Wireless security auditing</i></b> and attack software program written using the <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> Programming Language and the Python Qt GUI library,  the program is able to crack and recover WEP/WPA/WPS keys and also run  other <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> based <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attacks</a> on wireless or ethernet based networks.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Features :-</b></div>
<div style="text-align: justify;">
<ul>
<li>WEP <a href="http://www.toolwar.com/search/label/Cracking" target="_blank">Cracking</a> with Fragmentation,Chop-Chop, Caffe-Latte, Hirte, ARP Request Replay or WPS attack </li>
<li>WPA/WPA2 Cracking with Dictionary or WPS based attacks</li>
<li>Automatic saving of key in database on successful crack</li>
<li>Automatic Access Point Attack System</li>
<li>Session Hijacking (Passive and Ethernet Modes)</li>
<li>Access Point MAC Address Geo Location Tracking</li>
<li>Internal <a href="http://www.toolwar.com/search/label/MITM" target="_blank">MITM</a> Engine</li>
<li>Bruteforce Attacks (HTTP,HTTPS,TELNET,FTP)</li>
<li>Update Support</li>
</ul>
<h3>
<b>Tutorials ::  </b></h3>
<b>Session Hijacking Demonstration ::</b><br />
<b> </b> <br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Bi-8JRNpMqo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Bruteforcing Routers with Fern-Wifi-Cracker ::</b>  <br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/_ztQQWMoVX4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Cracking WEP Security with Fern-Wifi-Cracker ::</b>  <br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/vpiOPEZD6qw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<h3>
<b>Download :: </b></h3>
<b>Download Here :: </b><a href="http://code.google.com/p/fern-wifi-cracker/downloads/list" target="_blank">Fern WiFi Cracker</a> <b> </b><br />
<b>Source Website ::</b> <a href="http://code.google.com/p/fern-wifi-cracker/">http://code.google.com/p/fern-wifi-cracker/</a></div>
</div>

Fern WiFi Cracker (Wireless Security Auditing) :: Tools

Fern Wifi Cracker is a Wireless security auditing and attack software program written using the Python Programming Language and the P...

FS-NyarL (Pentesting and Forensics) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="FS-NyarL Logo" border="0" height="400" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyvqhfIV1vfEKDsDPoTq-IY5y6kdJuGAIfRzvtSPL90-6xtK2hDdppU1kPwgvztn_cudPZFcOqOalRYynOeDEflS5wufjqugLOyzJNrbZhqLjb34aHNnZuPJhRLZ_SInYW0BFppZeFQqDm/s1600-rw/FS-NyarL+Logo.jpg" title="FS-NyarL Logo" width="248" /></div>
<div style="text-align: justify;">
<b>NyarL</b> it's Nyarlathotep, a mitological chaotic deity of the writer HP. Lovecraft's cosmogony.  It's represent Crawling Chaos and <b>FS-NyarL</b> it's The <b>Crawling Chaos of Cyber Security</b>. A <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> takeover & <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensic analysis tool</a> - useful to advanced  PenTest tasks & for fun and profit - but use it at your own risk! </div>
<ul style="text-align: justify;">
<li>Interactive Console</li>
<li>Real Time Passwords Found</li>
<li>Real Time Hosts Enumeration</li>
<li>Tuned Injections & Client Side Attacks</li>
<li>ARP Poisoning & SSL Hijacking</li>
<li>Automated HTTP Report Generator</li>
</ul>
<div style="text-align: justify;">
<b>ATTACKS IMPLEMENTED:</b> </div>
<ul style="text-align: justify;">
<li>MITM (Arp Poisoning)</li>
<li>Sniffing (With & Without Arp Poisoning)</li>
<li>SSL Hijacking (Full SSL/TLS Control)</li>
<li>HTTP Session Hijaking (Take & Use Session Cookies)</li>
<li>Client Browser Takeover (with Filter Injection in data stream)</li>
<li>Browser AutoPwn (with Filter Injection in data steam)</li>
<li>Evil Java Applet (with Filter Injection in data stream)</li>
<li>DNS Spoofing</li>
<li>Port Scanning</li>
</ul>
<table class="notableborder" style="margin-left: 0px; margin-right: 0px; text-align: left;"><tbody>
<tr><td colspan="2"><b>POST ATTACKS DATA OBTAINED:</b><br />
<ul>
<li>Passwords extracted from data stream</li>
<li>Pcap file with whole data stream for deep analysis</li>
<li>Session flows extracted from data stream (Xplico & Chaosreader)</li>
<li>Files extracted from data stream</li>
<li>Hosts enumeration (IP,MAC,OS)</li>
<li>URLs extracted from data stream</li>
<li>Cookies extracted from data stream</li>
<li>Images extracted from data stream</li>
<li>List of HTTP files downloaded extracted from URLs</li>
</ul>
</td> </tr>
<tr><td><b>DEPENDENCIES (aka USED TOOLS):</b><br />
<ul>
<li>Chaosreader (already in bin folder)</li>
<li><a href="http://www.toolwar.com/2013/11/xplico-tools.html" target="_blank">Xplico</a></li>
<li><a href="http://www.toolwar.com/2013/09/ettercap-076-tools.html" target="_blank">Ettercap</a></li>
<li>Arpspoof</li>
<li>Arp-scan</li>
<li>Mitmproxy</li>
<li><a href="http://www.toolwar.com/2014/02/nmap-and-zenmap-network-discovery-and.html" target="_blank">Nmap</a></li>
<li><a href="http://www.toolwar.com/2013/09/tcpdump-is-network-sniffer-we-all-used.html" target="_blank">Tcpdump</a></li>
<li><a href="http://www.toolwar.com/2013/09/beef-browser-exploitation-framework.html" target="_blank">Beef</a></li>
</ul>
</td> <td><ul>
<li><a href="http://www.toolwar.com/2013/10/social-engineering-toolkit-set-tools.html" target="_blank">SET</a></li>
<li><a href="http://www.toolwar.com/2013/09/metasploit-framework.html" target="_blank">Metasploit</a></li>
<li><a href="http://www.toolwar.com/2013/09/dsniff-tools.html" target="_blank">Dsniff</a></li>
<li><a href="http://www.toolwar.com/2013/10/technitium-mac-address-changer-v6-tools.html" target="_blank">Macchanger</a></li>
<li>Hamster</li>
<li>Ferret</li>
<li><a href="http://www.toolwar.com/2013/10/p0f-tools.html" target="_blank">P0f</a></li>
<li><a href="http://www.toolwar.com/2013/11/foremost-tools.html" target="_blank">Foremost</a></li>
<li>SSLStrip</li>
<li><a href="http://www.toolwar.com/2014/02/sslsplit-mitm-attack-against-ssltls.html" target="_blank">SSLSplit</a></li>
</ul>
</td></tr>
</tbody></table>
<br />
<table class="notableborder" style="margin-left: 0px; margin-right: 0px; text-align: left;"><tbody>
<tr><td><h3>
Tutorials ::</h3>
<b>Screenshots ::  </b><a href="http://www.fulgursecurity.com/en/content/fs-nyarl" target="_blank">Click Here</a> <br />
<h3>
Download ::</h3>
<b>Linux ::</b> <a href="http://www.fulgursecurity.com/tools/fs-nyarl/FS-NyarL_v1.0-kali.tar.gz" target="_blank">FS-NyarL v1.0</a> (.tar.gz)<br />
<b>Official Website :: </b><a href="http://www.fulgursecurity.com/en/content/fs-nyarl">http://www.fulgursecurity.com/en/content/fs-nyarl</a></td></tr>
</tbody></table>

FS-NyarL (Pentesting and Forensics) :: Framework

NyarL it's Nyarlathotep, a mitological chaotic deity of the writer HP. Lovecraft's cosmogony. It's represent Crawling Chaos...

SSLsplit (MITM Attack against SSL/TLS) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="sslsplit" border="0" height="220" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiKnDa1SmFAz2I_uUyfY8OE-KawIYa9Rk7T3wbyfUM42-zCwgo1Hs18FThDil200FpKE2OdkcCO9Uvk0_lHGNieQuDLgJxQVuvj7VN0Yhxbtky5w-AyzRHrrqWZB4Qrf8q5dafKyblfRnO/s1600-rw/SSLsplit.jpg" title="sslsplit" width="400" /></div>
<div style="text-align: justify;">
<span style="font-family: inherit;"><b>SSLsplit</b> is a tool for <b><a href="http://www.toolwar.com/search/label/MITM" target="_blank">man-in-the-middle attacks</a> against SSL/TLS</b> encrypted
<a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> connections.  Connections are transparently intercepted through a
network address translation engine and redirected to SSLsplit.  <b>SSLsplit</b>
terminates SSL/TLS and initiates a new SSL/TLS connection to the original
destination address, while logging all data transmitted.  SSLsplit is intended
to be useful for network <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensics</a> and <a href="http://www.toolwar.com/search/label/Penetration" target="_blank">penetration testing</a>.</span></div>
<br />
<div style="text-align: justify;">
<span style="font-family: inherit;"><b>SSLsplit </b>supports plain TCP, plain SSL, HTTP and HTTPS connections over both
IPv4 and IPv6.  For SSL and HTTPS connections, SSLsplit generates and signs
forged X509v3 certificates on-the-fly, based on the original server certificate
subject DN and subjectAltName extension.  <b>SSLsplit</b> fully supports Server Name
Indication (SNI) and is able to work with RSA, DSA and ECDSA keys and DHE and
ECDHE cipher suites.  <b>SSLsplit </b>can also use existing certificates of which the
private key is available, instead of generating forged ones.  <b>SSLsplit</b> supports
NULL-prefix CN certificates and can deny OCSP requests in a generic way.
SSLsplit removes HPKP response headers in order to prevent public key pinning.</span></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Installation ::</b></div>
<div style="text-align: justify;">
SSLsplit is or will be available as a package or port on the following systems:</div>
<ul style="text-align: justify;">
<li>OpenBSD: security/sslsplit</li>
<li>Arch Linux AUR: sslsplit</li>
<li>Fedora: sslsplit</li>
<li>Kali: sslsplit</li>
<li>Backtrack: sslsplit</li>
</ul>
<div style="text-align: justify;">
<b>To install from source:</b></div>
<div style="text-align: justify;">
<pre><code class=" ruby">make
make <span class="keymethods">test</span>       <span class="comment"># optional unit tests</span>
make install    <span class="comment"># optional install</span>
</code></pre>
</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Usage ::</b></div>
<div style="text-align: justify;">
<pre><code class=" sql">% sslsplit -h
<span class="keyword">Usage</span>: sslsplit [options...] [proxyspecs...]
  -c pemfile  use CA cert (<span class="keyword">and</span> <span class="keyword">key</span>) <span class="keyword">from</span> pemfile <span class="keyword">to</span> sign forged certs
  -k pemfile  use CA <span class="keyword">key</span> (<span class="keyword">and</span> cert) <span class="keyword">from</span> pemfile <span class="keyword">to</span> sign forged certs
  -C pemfile  use CA chain <span class="keyword">from</span> pemfile (intermediate <span class="keyword">and</span> root CA certs)
  -K pemfile  use <span class="keyword">key</span> <span class="keyword">from</span> pemfile <span class="keyword">for</span> leaf certs (<span class="keyword">default</span>: generate)
  -t certdir  use cert+chain+<span class="keyword">key</span> PEM files <span class="keyword">from</span> certdir <span class="keyword">to</span> target <span class="keyword">all</span> sites
              matching the common <span class="keyword">names</span> (non-matching: generate if CA)
  -O          deny <span class="keyword">all</span> OCSP requests <span class="keyword">on</span> <span class="keyword">all</span> proxyspecs
  -P          passthrough SSL connections if they cannot be split because <span class="keyword">of</span>
              client cert auth <span class="keyword">or</span> <span class="keyword">no</span> matching cert <span class="keyword">and</span> <span class="keyword">no</span> CA (<span class="keyword">default</span>: <span class="keyword">drop</span>)
  -g pemfile  use DH <span class="keyword">group</span> params <span class="keyword">from</span> pemfile (<span class="keyword">default</span>: keyfiles <span class="keyword">or</span> auto)
  -G curve    use ECDH named curve (<span class="keyword">default</span>: secp160r2 <span class="keyword">for</span> non-RSA leafkey)
  -Z          disable SSL/TLS compression <span class="keyword">on</span> <span class="keyword">all</span> connections
  -s ciphers  use the given OpenSSL cipher suite spec (<span class="keyword">default</span>: <span class="keyword">ALL</span>:-aNULL)
  -e engine   specify <span class="keyword">default</span> NAT engine <span class="keyword">to</span> use (<span class="keyword">default</span>: ipfw)
  -E          list available NAT engines <span class="keyword">and</span> exit
  -u <span class="keyword">user</span>     <span class="keyword">drop</span> <span class="keyword">privileges</span> <span class="keyword">to</span> <span class="keyword">user</span> (<span class="keyword">default</span> if run <span class="keyword">as</span> root: nobody)
  -j jaildir  chroot() <span class="keyword">to</span> jaildir (<span class="keyword">default</span> if run <span class="keyword">as</span> root: /var/empty)
  -p pidfile  <span class="keyword">write</span> pid <span class="keyword">to</span> pidfile (<span class="keyword">default</span>: <span class="keyword">no</span> pid file)
  -l logfile  <span class="keyword">connect</span> log: log one line summary per <span class="keyword">connection</span> <span class="keyword">to</span> logfile
  -L logfile  content log: <span class="keyword">full</span> data <span class="keyword">to</span> file <span class="keyword">or</span> named pipe (excludes -S)
  -S logdir   content log: <span class="keyword">full</span> data <span class="keyword">to</span> separate files <span class="keyword">in</span> dir (excludes -L)
  -d          daemon mode: run <span class="keyword">in</span> background, log error messages <span class="keyword">to</span> syslog
  -D          debug mode: run <span class="keyword">in</span> foreground, log debug messages <span class="keyword">on</span> stderr
  -V          print version information <span class="keyword">and</span> exit
  -h          print <span class="keyword">usage</span> information <span class="keyword">and</span> exit
  proxyspec = type listenaddr+port [natengine|targetaddr+port|<span class="string">"sni"</span>+port]
  e.g.        http <span class="number">0.0</span>.<span class="number">0.0</span> <span class="number">8080</span> www.roe.ch <span class="number">80</span>  # http/<span class="number">4</span>; static hostname dst
              https ::<span class="number">1</span> <span class="number">8443</span> <span class="number">2001</span>:db8::<span class="number">1</span> <span class="number">443</span>   # https/<span class="number">6</span>; static address dst
              https <span class="number">127.0</span>.<span class="number">0.1</span> <span class="number">9443</span> sni <span class="number">443</span>     # https/<span class="number">4</span>; SNI DNS lookups
              tcp <span class="number">127.0</span>.<span class="number">0.1</span> <span class="number">10025</span>              # tcp/<span class="number">4</span>; <span class="keyword">default</span> NAT engine
              ssl <span class="number">2001</span>:db8::<span class="number">2</span> <span class="number">9999</span> pf          # ssl/<span class="number">6</span>; NAT engine <span class="string">'pf'</span>
Example:
  sslsplit -k ca.<span class="keyword">key</span> -c ca.pem -P  https <span class="number">127.0</span>.<span class="number">0.1</span> <span class="number">8443</span>  https ::<span class="number">1</span> <span class="number">8443</span></code></pre>
</div>
<div style="text-align: justify;">
<code class=" sql"><span style="font-family: "Courier New",Courier,monospace;"><b><span style="font-weight: normal;"><span class="number"><br /></span></span></b></span>
</code></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Requirements ::</h3>
<div style="text-align: justify;">
SSLsplit depends on the OpenSSL and libevent 2.x libraries.
The build depends on GNU make and a POSIX.2 environment in <code>PATH</code>.
The (optional) unit tests depend on the check library.</div>
<div style="text-align: justify;">
SSLsplit currently supports the following operating systems and NAT engines:</div>
<ul style="text-align: justify;">
<li>FreeBSD: pf rdr and divert-to, ipfw fwd, ipfilter rdr</li>
<li>OpenBSD: pf rdr-to and divert-to</li>
<li>Linux: netfilter REDIRECT and TPROXY</li>
<li>Mac OS X: ipfw fwd and pf rdr (experimental)</li>
</ul>
<h3>
Download ::</h3>
<b>Linux :: </b><a href="http://mirror.roe.ch/rel/sslsplit/sslsplit-0.4.8.tar.bz2" target="_blank">SSLsplit v0.4.8</a> (.tar.bz2)<b><br /></b><br />
<b>Official Website ::</b> <a href="http://www.roe.ch/SSLsplit">http://www.roe.ch/SSLsplit</a><br /><code class=" ruby"><span class="comment"></span>
</code>

SSLsplit (MITM Attack against SSL/TLS) :: Tools

SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. Connections are transparently interc...

Subterfuge (Automated Man-in-the-Middle Attack Framework) :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="subterfuge logo" border="0" height="200" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGb-vG4899yTmXjSo7XRKez6Aw4wrLKvoCwFgYGJNWwt-n_CXvFKygAPCymPWbyBraF_uuQ3LfM_MebI3suMkXGpU4X_-Gv0pruqQOLbTtYCDYO20zetlTAkXFvP6YhHiTyxEeaoUFa6d0/s1600-rw/subterfuge+logo.png" title="subterfuge logo" width="196" /></div>
<div style="text-align: justify;">
<b>Subterfuge </b>is a <i>Automated Man-in-the-Middle Attack Framework</i>. Enter<b> Subterfuge</b>, a <b>Framework</b> to take the arcane  art of<i> Man-in-the-Middle Attack</i> and make it as simple as point and  shoot. A beautiful, easy to use interface which produces a more  transparent and effective attack is what sets <b>Subterfuge</b> apart from  other attack tools. Subterfuge demonstrates vulnerabilities in the ARP  Protocol by harvesting credentials that go across the network, and even  exploiting machines through race conditions. Now walk into a  corporation… </div>
<div style="text-align: justify;">
A rapidly-expanding portion of today’s Internet  strives to increase personal efficiency by turning tedious or complex  processes into a framework which provides instantaneous results. On the  contrary, much of the information security community still finds itself  performing manual, complicated tasks to administer and protect their  computer networks. Given the increase in automated hacking tools, it is  surprising that a simplistic, “push-button” tool has not been created  for information security professionals to validate their networks’  ability to protect against a <i>Man-In-The-Middle attack. </i><b>Subterfuge</b> is a  small but devastatingly effective credential-harvesting program which  exploits a vulnerability in the Address Resolution Protocol. It does  this in a way that a non-technical user would have the ability, at the  push of a button, to harvest all of the usernames and passwords of  victims on their connected network, thus equipping information and  network security professionals with a “push-button” security validation  tool. </div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/x-L80d1USn4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: left;">
<b> Download Here :: </b><a href="https://subterfuge.googlecode.com/files/SubterfugePublicBeta5.0.tar.gz" target="_blank">SubterfugePublicBeta5.0</a></div>
<div style="text-align: left;">
<b> Source :: </b>https://code.google.com/p/subterfuge/</div>
</div>

Subterfuge (Automated Man-in-the-Middle Attack Framework) :: Framework

Subterfuge is a Automated Man-in-the-Middle Attack Framework . Enter Subterfuge , a Framework to take the arcane art of Man-in-the-M...

Ettercap 0.7.6 (Suite for Man in the Middle Attacks) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Ettercap Latest" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWoGDE85eqn_tOCNuFSjaPN2IkcBif4LxXElMa75DJBE6XIvfRsjUS4F5MCg_GPdOlTj8DAOzywnL9_4lvEhPL3xZ8mEC_g0yy36Fbp_SyTnkAQZzFlhoRnFRNo4p9cfbUsObNLOqIbpGO/s1600-rw/ettercap1.png" title="Ettercap latest" /></div>
<div style="text-align: justify;">
<b>Ettercap</b> is tool that mostly used for <i>MITM (man-in-the-middle) attack</i>. <b>Ettercap</b> is a comprehensive suite for <i>man in the middle attacks</i>.  It sniffs the live connections, content filtering on the fly  and many other interesting tricks. It supports active and passive  dissection of many protocols and includes many features for network and  host analysis.<br />
<b>New Features :</b></div>
<ul>
<li>+ New logo</li>
<li>+ Added ascii FQDN support to DHCP ACK</li>
<li>+ Added UA parsing to http packets</li>
<li> + Print a message when done reading PCAP file</li>
<li>+ Added support for IPv4 and IPv6 Tunnels</li>
<li>+ New mDNS dissector</li>
<li> + New clean-all cmake target</li>
<li>+ Added PPI support (per packet information) for wireless captures</li>
<li>+ Ensure that we find required packages with cmake</li>
</ul>
<div style="text-align: center;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Ym1LyRAbEgw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><br /></b>
<br />
<div style="text-align: left;">
<b>Download Here :: <a href="http://sourceforge.net/projects/ettercap/files/ettercap/0.7.6-Locard/ettercap-0.7.6.tar.gz/download" target="_blank">Ettercap 0.7.6.tar.gz</a></b></div>
<div style="text-align: left;">
<b>Official Website :: </b>http://ettercap.github.io/</div>
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="text-align: center;">
</div>
<div style="text-align: center;">
</div>
</div>

Ettercap 0.7.6 (Suite for Man in the Middle Attacks) :: Tools

Ettercap is tool that mostly used for MITM (man-in-the-middle) attack . Ettercap is a comprehensive suite for man in the middle attack...

Subscribe to: Comments ( Atom )