Ettercap (dns_spoof)

Question

I need to prove to my boss that he has a vulnerability to a mitm vector on his network. To do so I have been trying to configure ettercap with dns_spoof as an example.

When I run the attack on myself I am redirected reliably, however, I cant redirect any other computers on my network (I own them all so its all good).

Does anyone know what might be causing this? I have flushed the dscache on them and still nothing.

http://www.thegeekstuff.com/2012/05/ettercap-tutorial/ an step by step tutorial regarding it — BlueBerry - Vignesh4303, Oct 01 '12 at 13:23

score 3 · Answer 1 · edited May 10 '16 at 09:36

3

I have found a solution to this problem.

I enabled packet forwarding on my kernel and the attack works great now.

 sudo sysctl -w net.inet.ip.forwarding=1

edited May 10 '16 at 09:36

angussidney

230
2
9

answered Oct 01 '12 at 19:22

November

505
1
5
12

You should list the command used and then mark this as accepted (thought I know there might be a delay before you can). – Jeff Ferland Oct 01 '12 at 19:41
there is a lag till I can – November Oct 01 '12 at 21:27

Ettercap (dns_spoof)

1 Answers1