ARP POISONING

MAN IN THE MIDDLE ATTACK PROCESS:

For Doing This You Need BackTrack Operating System Installed In Your Virtual Box...

Open Back Track Operating System In Virtual Box..

The Default UserName is  "root"  And Password Is  "toor"

------------------------------------------------------------------------------------------------------------

STEP 1:
 OPen The Root Teriminal(Comand Prompt) in Bt(Back Track)

   Type "ettercap -G" And Hit Enter
   It Opens Ettercap Software
   Open Internet Connections From TaskBar Menu
   Open Konquer Browser
   Open Path In Folder     "root/etc"
   Search The File "etter.conf" And Open It

   Search For Word  "Privs" And Below That   (MAKE THEM BOTH EQUAL TO ZERO)
      ec_uid=0
      ec_gid=0
   
   Search For Word  "Linux"
   In The Sentence  "# If You Use Iptables"  Remove  #

   save It....

-----------------------------------------------------------------------------------------------------------

STEP 2:

   Now Open "sysctl.conf"  File
   Search For The Line "# The Next Line To Enable Packet Forwarding For IPV4"
   Remove # From The Line

   Below It Another Line Is Present "# net.ipv4.ip_forward=1"
   Remove # From The Line

------------------------------------------------------------------------------------------------------------

STEP 3:

     Go To Ettercap
     Open    Sniff------->Unified Sniffing
     Select The Interface And Click Ok

     Click    (1)  Start-------->start Sniffing
                 (2)  Hosts------->scan For Hosts

     To See The List Of Hosts
      Click   Hosts--------->Hosts  List

     Select The Ip Address Of Victim 1In the List And  Click "Add Target 1"
     Select The Ip Address Of Victim 2 In The List and Click "Add Target 2"

     Goto  "MITM" Option In The Menu Bar Of Ettercap
     Click "Arp Poisoning"
     Select "Sniff Remote Connections" And Press Ok
   
     ARP Replys Will be sent To The Victims

     To See That  Open Teriminal(Command Prompt)  And Type  "Wireshark"
      And Hit Enter
   
     You Can See The Arp Packets Are Sending To Victims..........


------------------------------------------------------------------------------------------------------------

    To Check Whether It Is Working Or Not
   
    Goto   Plugins---------->Manage Plugins
    Click "chk_poison" To Check Poison
     It Will Show The Poison Is Working Are Not

------------------------------------------------------------------------------------------------------------

If U want Any Changes In The Victims Browser

Goto Path  "Root/usr/share/ettercap/etter.filter.examples"

And Open That File And Copy One Example Of It

And Paste It In Any Empty Document And Save It As "Filename.filter"

Compile The File "Filename.filter" In The Teriminal With Command  "Filename.filter -O NewFileName"

Then It Produce a New File

Open Ettercap And Open The Option "Filters"

Open "Load Filter" And Select and Browse The Compiled File Of Filter and Hit Ok

Now If The Victim Opens Any Website In His Browser The Images In The Website Will Be Appeared As any Image Prescribed In The Filter (The Link Of The Image In The Filter).



                            ---------THE END---------