Jump to content

H@L0_F00

Dedicated Members
  • Posts

    834
  • Joined

  • Last visited

  • Days Won

    2

Posts posted by H@L0_F00

  1. As long as these tools are installed on the computer, where SSH is running you should be able to capture any information that is passing along. Wireshark may not be able to look at https traffic itself, but ethercap is capable of since its a suite for man in the middle attacks. You should also do a bit of reading on sslstrip, I think it may come handy at some stage.

    Ethercap: http://ettercap.sourceforge.net/

    Wireshark: http://www.wireshark.org/

    Wireshark would be able to see all traffic because it is no longer encrypted (unless it's HTTPS, another SSH server, etc) when the communication is between the server you are running and the server your friends are connecting to.

    Friends PC ---encrypted---> SSH server ---normal traffic---> Internet ---normal traffic---> SSH server ---encrypted---> Friends PC

  2. Here's a typical way I learn about things.

    1. I read about X from a forum post, blog, tech "news" site, etc. I don't know much about X, so I research it because it seems interesting or I just want to broaden my knowledge, if I already have some sort of an understanding.

    2. While reading about X, I come across Y. I don't know much about Y either, so step one repeats.

    3. I don't get to step 3 very often, because I get lost in learning about whatever it may be that I somehow ended up at.

    Example:

    Google SSH

    Read about SSH

    Come across "public-key cryptography"

    Follow the link to "public-key cryptography"

    Read about public-key cryptography

    Come across "RSA"

    Follow the link to "RSA"

    Read about RSA

    Anyways, some sites you may want to check out are:

    SecurityTube

    Social Engineering

    Back|Track Linux

    Metasploit Unleashed

  3. 30 minutes in a windowless room with an electric drill, claw hammer & pliers and I could have any volume of passwords I wanted.

    The Autopwn of social engineering, I'd say, except it requires more effort while success rate is much higher.

  4. thanks

    they work with linux right?

    and if they are not is there one for linux?

    edit: is there a version of they first one for linux

    Most linux distros come with OpenSSH installed by default. It's kind of the industry standard. The server daemon is sshd (Secure SHell Daemon). Google around and you will find tons of documentation as well as step-by-step guides for setting up sshd on your OS of choice.

×
×
  • Create New...