intercepting email

[paul_0]

just been playing around with ettercap and i can now intercept passwords and ip addresses ok, the next step i want to try is intercepting email sent from a wireless laptop to my wireless router. will ettercap do this or do i use another program?

[theprez98]

just been playing around with ettercap and i can now intercept passwords and ip addresses ok, the next step i want to try is intercepting email sent from a wireless laptop to my wireless router. will ettercap do this or do i use another program?
Whose email are we talking about?

[paul_0]

Whose email are we talking about?

these will be test emails sent from my second laptop on the wireless network. this will all be carried out on my own network, i started out using aircrack to find my wep key then used ettercap to catch passwords from laptop two, so the email is the next logical step.

[pureh@te]

In my opinion this is one of those gray area topics. Due to the fact that intercepting email which are not yours is unethical as well as illegal and we have no way of knowing your intentions the best thing to do would be.... obtain the backtrack tool list and then google your ass off and find the man pages for each tool and go from there. This is what I had to do and It has worked out to my best interest

[-=Xploitz=-]

In my opinion this is one of those gray area topics. Due to the fact that intercepting email which are not yours is unethical as well as illegal and we have no way of knowing your intentions the best thing to do would be.... obtain the backtrack tool list and then google your ass off and find the man pages for each tool and go from there. This is what I had to do and It has worked out to my best interest

I agree., and I'm sorry paul_0, but hes right. But, if you are truly doing this on your own network though, we apologize . However, we really have no way of knowing the truth. Please understand are position, cause we do not condone ANY ILLEGAL behavior or SUSPECTED illegal behavior. I wish you luck in your search. Google truly is your best friend in this case. Them and wireshark ;)

[paul_0]

thanks for the replies guys, i fully understand what you are saying. off to google now, really i just needed a vague idea as to what application i should be looking at. thanks xploitz ;)

[-=Xploitz=-]

anytime paul_0 .....anytime :)

[streaker69]

I agree., and I'm sorry paul_0, but hes right. But, if you are truly doing this on your own network though, we apologize . However, we really have no way of knowing the truth. Please understand are position, cause we do not condone ANY ILLEGAL behavior or SUSPECTED illegal behavior. I wish you luck in your search. Google truly is your best friend in this case. Them and wireshark ;)

In addition, any company where you'd work as an Admin intercepting and reading email is just a matter of hitting the email server, and you'd be duly authorized to read such as powers granted by your superiors. And even then, you'd only do it when requested.

[Paton]

Streaker....... Read everything.. His network was his router.
intercepting email sent from a wireless laptop to my wireless router

[streaker69]

Streaker....... Read everything.. His network was his router.

I did read his post, and I was commenting on Xploitz comment about not knowing if he is telling the truth. I know you may find this hard to believe but people have a tendency to misrepresent themselves on the internet. Some people actually flat out lie to get what they want, others try attempts at Social Engineering.

[theprez98]

Streaker....... Read everything.. His network was his router.
I think he was referencing the reply to the initial comment, not the initial comment itself. Meaning that if you have the authority as a sysadmin or other IT staff to monitor emails, there are more conventional ways of doing it, as opposed to using ettercap (or insert whatever tool is your choice).

[streaker69]

I think he was referencing the reply to the initial comment, not the initial comment itself. Meaning that if you have the authority as a sysadmin or other IT staff to monitor emails, there are more conventional ways of doing it, as opposed to using ettercap (or insert whatever tool is your choice).

Yep, that's pretty much what I meant.

[theprez98]

Yep, that's pretty much what I meant.
I'm psychic about psychics. :D

[Back|Track_user]

the best thing to do would be.... obtain the backtrack tool list and then google your ass off and find the man pages for each tool and go from there. This is what I had to do and It has worked out to my best interest

That's the fun part....sometimes.:D

[theflyingflea]

i have to ask not to be mean or anything or to say anyones wrong. But if no one shares info then no one gains. if you send him to google then when someone asks him he will send that persion to google and over time no one will share there information and if no one is sharing then no one is learning..

I understand that you cant tell if he is doing evil things. Thats his problem.


this is just a small comment. i have been trying for a year to learn some of this stuff and in that time a had people like you say no no no you can do something bad with it so you can have it. but i am not saying i have never been helped or pointed in the right direction. Great power comes Great responsibility... let us the people how want to learn be the responsible ones!!!!!!



PS sorry if it is mess and unfocused.... not a good writer.... i think i got my main point across..... just my thoughts.....

[streaker69]

i have to ask not to be mean or anything or to say anyones wrong. But if no one shares info then no one gains. if you send him to google then when someone asks him he will send that persion to google and over time no one will share there information and if no one is sharing then no one is learning..

I understand that you cant tell if he is doing evil things. Thats his problem.


this is just a small comment. i have been trying for a year to learn some of this stuff and in that time a had people like you say no no no you can do something bad with it so you can have it. but i am not saying i have never been helped or pointed in the right direction. Great power comes Great responsibility... let us the people how want to learn be the responsible ones!!!!!!



PS sorry if it is mess and unfocused.... not a good writer.... i think i got my main point across..... just my thoughts.....

So, let's take this a little further. Let's say this is an automotive forum, if someone were to come along and ask "how do I roll back my odometer? I just want to know how, because...." Should that information be freely available? After all, he wouldn't do anything evil with that information.

Maybe if this were a firearms forum, and someone were to ask the best way to remove a serial number off a firearm, or how to change your firearm so that forensics would have a tough time tracing a fired round, would that be acceptable information to hand out?

Forums like this one and several others will not work in collusion for a person to commit a crime, which is a good thing, because hopefully the ethics and morality will spread and people will be less inclined to commit crimes with the information they're gathering.

Too many s'kriddies don't realize the serious nature of the crimes they're committing and that when they **** up someone else's system, that person that has to fix it has a family that they'd like to go home to at the end of the day and not have to sit there fixing something that they shouldn't have been messing with.

[g4hsean]

So, let's take this a little further. Let's say this is an automotive forum, if someone were to come along and ask "how do I roll back my odometer? I just want to know how, because...." Should that information be freely available? After all, he wouldn't do anything evil with that information.

Maybe if this were a firearms forum, and someone were to ask the best way to remove a serial number off a firearm, or how to change your firearm so that forensics would have a tough time tracing a fired round, would that be acceptable information to hand out?

Forums like this one and several others will not work in collusion for a person to commit a crime, which is a good thing, because hopefully the ethics and morality will spread and people will be less inclined to commit crimes with the information they're gathering.

Too many s'kriddies don't realize the serious nature of the crimes they're committing and that when they **** up someone else's system, that person that has to fix it has a family that they'd like to go home to at the end of the day and not have to sit there fixing something that they shouldn't have been messing with.


i hear ya bout "Too many s'kriddies don't realize the serious nature of the crimes they're committing and that when they **** up someone else's system, that person that has to fix it has a family that they'd like to go home to at the end of the day and not have to sit there fixing something that they shouldn't have been messing with." but in the end if the persone really wants the info he/she will find it. All were doing is making it harder to find. Crap i found out how to catch e-mails in bout 10 minutes of google search on some of the tools on BT 2.0..... Although we are here to help.... don't count on us giving you the good info :P learn as we did. GOOGLE IT!

[Paton]

theflyingflea ........ Like said above, It's keeping liability down by not telling how to do things that are illegal without permisson, so be it.

Goto any "security" site you will get the same answer. Any legitimate site distances themselves from illegal activity..

Also, it's all about asking the proper questions

[theprez98]

but in the end if the persone really wants the info he/she will find it. All were doing is making it harder to find.
Maybe so, but I can feel better at the end of the day knowing that I didn't help someone to break the law. And the collective members of this forum can feel better at the end of the day, knowing that they didn't subject the forum to some legal (or otherwise) liability for helping someone else break the law.

[lordlame]

I think there are far more serious consequences to be earned from cracking a wep key than reading some ones email.

Any one here, that thinks for one minute(!) that by showing people to crack wep via BABY step by step instructions, is going to be noble and righteous when they find "their" key are out out of their ****ing minds.

How naive can you get?

Seriously, the contradictions aren't funny.

[theprez98]

I think there are far more serious consequences to be earned from cracking a wep key than reading some ones email.

Any one here, that thinks for one minute(!) that by showing people to crack wep via BABY step by step instructions, is going to be noble and righteous when they find "their" key are out out of their ****ing minds.

How naive can you get?

Seriously, the contradictions aren't funny.

What are the consequences I have earned for cracking my own WEP key?

[streaker69]

What are the consequences I have earned for cracking my own WEP key?

You actually understood that nonsensical rambling?

[Paton]

You actually understood that nonsensical rambling?

It wasn't that hard to understand......

Actually lame, I don't like helping people do that as there are like azillion sites that show step by step in video form how to do it.

But you're right , it is kinda contradictory.

[theprez98]

You actually understood that nonsensical rambling?

Unfortunately, I did understand. Fortunately, I know he was comparing apples and oranges.

[theflyingflea]

i understand. so next time i ask i will ask the right question.... thnx everyone for your time and replys

[lordlame]

You actually understood that nonsensical rambling?

You're in a different part of the woods here chief - you're arrogant clique are in the minority.

I am not here to beef with anyone but you apparently are. Did I upset you by pointing out your accomplices contradictions? Do not be upset. It was blindly obvious.

theprez: Thanks for your input regarding your own ap, unfortunately it had no reference to my post.

[theprez98]

You're in a different part of the woods here chief - you're arrogant clique are in the minority.
And who is in your "majority"? I don't see many people rushing to your defense here.

I am not here to beef with anyone but you apparently are. Did I upset you by pointing out your accomplices contradictions? Do not be upset. It was blindly obvious.

theprez: Thanks for your input regarding your own ap, unfortunately it had no reference to my post.
Actually, your comparison wasn't really valid, since you were effectively comparing apples and oranges. As for my post, it did reference your post; you just haven't figured it out yet.

[-=Xploitz=-]

As for my post, it did reference your post; you just haven't figured it out yet.

In the voice of Ashton Kutcher from That Seventies Show...."OOOohhhh ...BURN!":D

[wyze]

Too many s'kriddies don't realize the serious nature of the crimes they're committing and that when they **** up someone else's system, that person that has to fix it has a family that they'd like to go home to at the end of the day and not have to sit there fixing something that they shouldn't have been messing with.

Yeah no f***ing doubt man... that's actually a great way of pointing it out

[Notlist3d]

Im always suprised when people ask a question like this. It seems that people would realize that anything like this that could be so easily used for illegal activities, that no one here will help them.

[wvdmc]

Im always suprised when people ask a question like this. It seems that people would realize that anything like this that could be so easily used for illegal activities, that no one here will help them.


But it's the same way with most things on these boards. Cracking WEP is no different, it could very easily be used for illegal activities.

But I see it like this. We walk someone through cracking WEP. Now, with the information we have given them, they can steal someone's internet. Without learning other things on their own, that's what they'll be limited to.

Next, we walk someone through sniffing passwords via Ettercap. Now they can break into someone's network, steal their internet, and steal their passwords.

Next, we walk someone through intercepting e-mail via Ettercap. Now they can break into someone's network, steal their internet, steal their passwords, and read their e-mail and it goes on and on.

If a skiddie breaks into someone's network and can't do anything other than steal bandwidth, it's not a big deal.

If they can break into a network and intercept e-mails, passwords, etc., that's more of a big deal.

Lordlame, I've broken two WEP passwords. One on my own router, and one on the guy in the room down the hall when he asked me to show him how to do it. That's it. Maybe this is because I'm a mature, resposnsible adult interested in security rather than a young teenage kid on a power trip wanting to break into the neighbor's shit and change their network name to "pwned h4xxors".

Maybe you misunderstand the aim of backtrack and these forums.

[Barry]

wvdmc, that's probably the most well thought out post by a relitave newbe I've seen in a long time.

[shamanvirtuel]

the number of post is nothing....
it's not because he got 5 posts only that he is a newbee....there's a life before here........

[-=Xploitz=-]

Wrong section..this isn't a tutorial. I couldn't move this when I wasn't a mod..so nows better than never...moving to General IT Discussion Forum.

[Barry]

the number of post is nothing....
it's not because he got 5 posts only that he is a newbee....there's a life before here........

Yea, I know, but the general age/iq of most newbies is somewhere around their post number.

[streaker69]

But it's the same way with most things on these boards. Cracking WEP is no different, it could very easily be used for illegal activities.

But I see it like this. We walk someone through cracking WEP. Now, with the information we have given them, they can steal someone's internet. Without learning other things on their own, that's what they'll be limited to.

Next, we walk someone through sniffing passwords via Ettercap. Now they can break into someone's network, steal their internet, and steal their passwords.

Next, we walk someone through intercepting e-mail via Ettercap. Now they can break into someone's network, steal their internet, steal their passwords, and read their e-mail and it goes on and on.

If a skiddie breaks into someone's network and can't do anything other than steal bandwidth, it's not a big deal.

If they can break into a network and intercept e-mails, passwords, etc., that's more of a big deal.

Lordlame, I've broken two WEP passwords. One on my own router, and one on the guy in the room down the hall when he asked me to show him how to do it. That's it. Maybe this is because I'm a mature, resposnsible adult interested in security rather than a young teenage kid on a power trip wanting to break into the neighbor's shit and change their network name to "pwned h4xxors".

Maybe you misunderstand the aim of backtrack and these forums.

I agree with you, which is exactly why I look with suspicion upon most people when they show up here asking the most basic questions about the OS. BT by no means is meant for people who have never seen Linux before.

It's especially telling of someone's intent when the first thing they ask about in their quest to "learn pentesting" is to crack WEP. After all, shouldn't the first thing you want to learn would be Recon, Social Engineering and such, and not jump right into cracking WEP.

[pureh@te]

I hate to stoop to his level but lord lame is a douche bag. He sent me a bunch of pm's earlier that I shared with balding parrot and we had a great laugh. I've decided that he is a kid a here for illegal activities research. I wasnt going to say any thing but I feel the community has a right to know. I would post the pm but I erased it but if Balding_parrot wants to I think it would be great. He wasnt man enough to post it in public . Essentially he was pissed because I told him this was a linux forum and not a cain and able forum. This will probably start some trouble but I want to warn every one about him in case your exchanging pm's about illegal stuff.

[-=Xploitz=-]

And we can see inside peoples PMs..Muw ha ha ha ha ah ha hahahahah!!! :D

Hopefully that will detour people from writing PM's requesting how to do illegal activities. We like to give people privacy..but when we think or suspect this...we will invade your privacy and ban your ass if its true.

[thorin]

But if no one shares info then no one gains. if you send him to google then when someone asks him he will send that persion to google and over time no one will share there information and if no one is sharing then no one is learning..
Ya but imagine how great everyon'es google'fu will become!

There is lots to be learned by asking specific details after having done your research that will result in people accomplishing the things they need and not breaking the forum guidelines.

[balding_parrot]

Ok, so with the starting of that other thread which I deleted, which serves no purpose other than a direct attempt to belittle a respected forum member, I am calling time on this.

Yes I could post ALL of the PM's relating to this, but I am not going to add any more fuel to this fire.

@ lordlame Stop living up to your handle and start acting in the professional manner we all should be. If you are so insistent on using and advising other forum members to use windows software under backtrack, how about showing them how it is done, and how well it works (make sure that this ONLY uses FREE tools to achieve).

So with that, I am calling an end to this for the benefit of the forum, any hint of it continuing and I WILL take action.