[VIDEO] 106 - Man in the Middle with URLSnarf

[Darren Kitchen]

https://youtu.be/Ika2uEIWlYc

[Rodio]

I have the following issue with URLSnarf.

My SSHFS is working OK, when I create manually hello.txt from turtle's CLI, I can see it in in the server(cloud) under /home/turtle (as explained in the previous video)

List of issues;

1- When I want to test URLSnarf, by pressing "Test" under "Configure", I see the message "urlfsnarf: listening on br-lan (tcp port 80 or 8080 or port 3128)". On Windows 7 (where LAN Turtle is plugged-in), when I browse I don't see any activity under URLSnarf.

2- When I choose "Save log to SSHFS if available", press "Submit", go "Back", go "Configure" again, I see the option changed back to "Do not save log files". It seems like it doesn't keep the first option related to SSHFS

3- I can start URLSnarf successfully but I cannot stop it successfully. When I press "Stop", I see the message "Killing URLFSnarf at PID XXXX YYYYY", I press "OK" but it doesn't stop. If I press "Stop" again, I see another IDs.

I removed URLSnarf from the modules, added back and the problem continues.

Thanks.

[Kel]

I have noticed that the stop url snarf command doesn't always work (as you mentioned the right PID is not killed)

solution :

exit turtle shell

type : ps to show active process

note the <pid> of urlsnarf

type : kill <pid> to kill the process manually

return to turtle shell

then go to configure

choose SSHFS (option 1 for the logs)

then back to the previous menu (urlsnarf should be stopped at the time beeing)

start urlsnarf

exit turtle shell

go to /SSHFS on the turtle

browse in http (ursnarf is listening  to 80 / 8080 etc...)

you should find a urlsnarf log file.

which should also be found under /home/turtle in you VPS