daten Contributor


Joined: 16 May 2002 Posts: 385 Location: Maryland, USA
|
Posted: 04 Apr 2009 1:12 am Post subject: fake root certificate attack |
|
|
I got the following email from an eager developer who wants to bring ettercap back to life (even though I know people are still using it every day). Alor or Naga, you around anymore?
| Quote: | I have actually written a new feature that adds a fake root certificate attack to ettercaps capabilities. So basically the target gets prompted to install a fake root certificate (cleverly of course, with the right info piped into the cert) and then if the attack is successful any future secure connections are compromised, I wrote it for use on my wireless router as part of a research project and its pretty neat to see it working.
I dont know if this would be possible but I guess I was really hoping to revive the ettercap project and bring it back to life, moderate the forums etc, and try to attract new developers, maybe even migrate the CVS to SVN. I guess I wanted to ask you if there was any specific reason the project kinda fadded away a few years back. Currently the forum registration is broken (the email verification does not work) but I see that you are an admin on there so you might be able to grant me access. I think I tried to register the usernames mole84 and efillman on the forum. Anyways any help or advice you could give me would be greatly appreciated. Have a good one.
Thanks,
Evan Fillman |
|
|