I'm looking at the sourcecode of Xerosploit, and there is a piece of code I don't understand:
cmd_snif = os.system("xettercap " + target_parse + target_ips + "
-P MYSQL, SNPP, DHCP, WHATSAPP, RLOGIN, IRC, HTTPS, POST, PGSQL, NNTP, DICT, HTTPAUTH, TEAMVIEWER, MAIL, SNMP, MPD, COOKIE, NTLMSS, FTP, REDIS
-I " + up_interface + " --gateway " + gateway + " -O,
--log /opt/xerosploit/xerosniff/" + filename + ".log
--sniffer-output /opt/xerosploit/xerosniff/" + filename + ".pcap")
What exactly is xettercap
? What do the options of -P
(i.e. "MYSQL, SNPP, DHCP, ...") do? What do they refer to in the sniff logs?
Which options should I use if I want to see just the important things, such as POST data (usernames, passwords, etc.)?