Can't seem to make Subterfuge work?? Please help

GoogleCodeExporter commented 8 years ago

What steps will reproduce the problem?
1. Running Subterfuge 4.1 beta
2. With python 2.7
3. Backtrack 5 r3 updated

What is the expected output? 

To perform a MITM attack successfully  

What do you see instead?

ubterfuge 
Validating models... 

0 errors found 
Django version 1.3.1, using settings 'subterfuge.settings' 
Development server is running at http://127.0.0.1:80/ 
Quit the server with CONTROL-C. 
[06/Sep/2012 23:12:43] "GET / HTTP/1.1" 200 10344 
[06/Sep/2012 23:12:44] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:45] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:46] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:47] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:48] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:49] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:50] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:51] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:52] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:53] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:54] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:55] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:12:56] "GET / HTTP/1.1" 200 438 
Running AutoPwn Method... 
No default gw on eth0 
Using:  wlan0 
Setting gateway as:  172.18.0.1 
Starting Pwn Ops... 
[06/Sep/2012 23:13:00] "GET /startpwn/auto/ HTTP/1.1" 500 53277 
[06/Sep/2012 23:13:00] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:13:00] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:13:01] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:13:01] "GET / HTTP/1.1" 200 438 
Encountered an error configuring arpwatch: Invalid Arguments. Terminating... 
Launching attack with standard configuration options. 
Automatically Configuring Subterfuge... 
[06/Sep/2012 23:13:02] "GET / HTTP/1.1" 200 438 
[06/Sep/2012 23:13:03] "GET / HTTP/1.1" 200 438 
Iptables Prerouting Configured 

Configuring System... 
net.ipv4.ip_forward = 1 
IP Forwarding Enabled. 
Initiating ARP Poison With ARPMITM... 
Starting up SSLstrip... 
Harvesting Credentials... 
[06/Sep/2012 23:13:04] "GET / HTTP/1.1" 200 437 
Poisoning the entire subnet... 

[06/Sep/2012 23:13:06] "GET / HTTP/1.1" 200 437 
Traceback (most recent call last): 
  File "/usr/share/subterfuge/sslstrip.py", line 30, in <module> 
    from sslstrip.StrippingProxy import StrippingProxy 
  File "/usr/share/subterfuge/sslstrip/StrippingProxy.py", line 20, in <module> 
    from ClientRequest import ClientRequest 
  File "/usr/share/subterfuge/sslstrip/ClientRequest.py", line 25, in <module> 
    from twisted.internet import ssl 
  File "/root/.pythonbrew/pythons/Python-2.7/lib/python2.7/site-packages/Twisted-12.0.0-py2.7-linux-i686.egg/twisted/internet/ssl.py", line 23, in <module> 
    from OpenSSL import SSL 
ImportError: No module named OpenSSL 
[06/Sep/2012 23:13:06] "GET / HTTP/1.1" 200 437 
[06/Sep/2012 23:13:07] "GET / HTTP/1.1" 200 437 
[06/Sep/2012 23:13:08] "GET / HTTP/1.1" 200 437 
[06/Sep/2012 23:13:09] "GET / HTTP/1.1" 200 437 
 Back

What version of the product are you using? On what operating system?

Subterfuge 4.1 (SubterfugePublicBeta4.1) on Backtrack 5 r3 

Please provide any additional information below.

I've run the attack on my own unsecured wifi network & ethernet and also local 
hotspots and public unsecured wifi which produce the same results above.

Original issue reported on code.google.com by woodz.w...@gmail.com on 7 Sep 2012 at 5:46

Attachments:

[Subterfuge Results .odt](https://storage.googleapis.com/google-code-attachments/subterfuge/issue-71/comment-0/Subterfuge Results .odt)
[Subterfuge Results2.odt](https://storage.googleapis.com/google-code-attachments/subterfuge/issue-71/comment-0/Subterfuge Results2.odt)

GoogleCodeExporter commented 8 years ago

Install OpenSSL 
Go to https://launchpad.net/pyopenssl
Download the pyOpenSSL.tar.gz
Unpack it and run the setup.py 

cd /root/downloads/

tar -xvf 'pyOpenSSL-0.11.tar.gz' 

cd pyOpenSSL-0.11

python setup.py install

should be close enough to give you an idea.

Original comment by baysecur...@gmail.com on 9 Sep 2012 at 12:20

GoogleCodeExporter commented 8 years ago

Thank you for the return comment. I followed your instruction successfully. 
This has remove or fixed? the following terminal output: 

[06/Sep/2012 23:13:06] "GET / HTTP/1.1" 200 437 
Traceback (most recent call last): 
  File "/usr/share/subterfuge/sslstrip.py", line 30, in <module> 
    from sslstrip.StrippingProxy import StrippingProxy 
  File "/usr/share/subterfuge/sslstrip/StrippingProxy.py", line 20, in <module> 
    from ClientRequest import ClientRequest 
  File "/usr/share/subterfuge/sslstrip/ClientRequest.py", line 25, in <module> 
    from twisted.internet import ssl 
  File "/root/.pythonbrew/pythons/Python-2.7/lib/python2.7/site-packages/Twisted-12.0.0-py2.7-linux-i686.egg/twisted/internet/ssl.py", line 23, in <module> 
    from OpenSSL import SSL 
ImportError: No module named OpenSSL  

Still haven't achieved a successfully MITM attack using subterfuge 4.1. But 
will be working on it and testing in different environments 

Here are my new terminal results after the changes with pyOpenSSL-0.11 

subterfuge
Validating models...

0 errors found
Django version 1.3.1, using settings 'subterfuge.settings'
Development server is running at http://127.0.0.1:80/
Quit the server with CONTROL-C.
[14/Sep/2012 03:21:56] "GET / HTTP/1.1" 200 10344
[14/Sep/2012 03:21:57] "GET /static/css/main.css HTTP/1.1" 200 8113
[14/Sep/2012 03:21:57] "GET /static/css/settings.css HTTP/1.1" 200 197
[14/Sep/2012 03:21:57] "GET /static/css/domtab.css HTTP/1.1" 200 3108
[14/Sep/2012 03:21:57] "GET /static/js/jquery.js HTTP/1.1" 200 91358
[14/Sep/2012 03:21:57] "GET /static/js/domtab.js HTTP/1.1" 200 9399
[14/Sep/2012 03:21:57] "GET /static/images/logo.png HTTP/1.1" 200 65863
[14/Sep/2012 03:21:57] "GET /static/images/title.png HTTP/1.1" 200 15636
[14/Sep/2012 03:21:57] "GET /static/images/activity.gif HTTP/1.1" 200 7247
[14/Sep/2012 03:21:57] "GET /static/images/down.png HTTP/1.1" 200 2936
[14/Sep/2012 03:21:57] "GET /static/images/loader.gif HTTP/1.1" 200 10819
[14/Sep/2012 03:21:57] "GET /static/images/subterfugebg.png HTTP/1.1" 200 
1459772
[14/Sep/2012 03:21:57] "GET /static/images/panel.jpg HTTP/1.1" 200 430
[14/Sep/2012 03:21:57] "GET /static/images/TranspFills/transpBlue90.png 
HTTP/1.1" 200 170
[14/Sep/2012 03:21:57] "GET /static/images/transpBlack75.png HTTP/1.1" 200 166
[14/Sep/2012 03:21:58] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:21:58] "GET /static/images/panelsmall.png HTTP/1.1" 200 342
[14/Sep/2012 03:21:58] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:21:59] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:00] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:01] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:02] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:03] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:04] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:05] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:06] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:07] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:08] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:09] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:10] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:13] "GET / HTTP/1.1" 200 438
Running AutoPwn Method...
No default gw on eth0
No default gw on wlan0
Using:  wlan1
Setting gateway as:  192.168.1.1
Starting Pwn Ops...
[14/Sep/2012 03:22:14] "GET /startpwn/auto/ HTTP/1.1" 500 53276
[14/Sep/2012 03:22:15] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:15] "GET / HTTP/1.1" 200 438
Encountered an error configuring arpwatch: Invalid Arguments. Terminating...
Launching attack with standard configuration options.
Automatically Configuring Subterfuge...
[14/Sep/2012 03:22:16] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:17] "GET / HTTP/1.1" 200 438
[14/Sep/2012 03:22:18] "GET / HTTP/1.1" 200 438
Iptables Prerouting Configured

Configuring System...
net.ipv4.ip_forward = 1
IP Forwarding Enabled.
Initiating ARP Poison With ARPMITM...
Starting up SSLstrip...
Harvesting Credentials...
[14/Sep/2012 03:22:19] "GET / HTTP/1.1" 200 437
Poisoning the entire subnet...

[14/Sep/2012 03:22:20] "GET / HTTP/1.1" 200 437

sslstrip 0.9 by Moxie Marlinspike running...
[14/Sep/2012 03:22:21] "GET / HTTP/1.1" 200 437
[14/Sep/2012 03:22:22] "GET / HTTP/1.1" 200 437
[14/Sep/2012 03:22:23] "GET / HTTP/1.1" 200 437
[14/Sep/2012 03:22:24] "GET / HTTP/1.1" 200 437
[14/Sep/2012 03:22:25] "GET / HTTP/1.1" 200 437

Original comment by woodz.w...@gmail.com on 15 Sep 2012 at 12:06

GoogleCodeExporter commented 8 years ago

Is there a fix for this below? :

Encountered an error configuring arpwatch: Invalid Arguments. Terminating...
Launching attack with standard configuration options.

Original comment by woodz.w...@gmail.com on 15 Sep 2012 at 12:08

GoogleCodeExporter commented 8 years ago

Original comment by topher.s...@gmail.com on 14 Mar 2013 at 3:12

Changed state: Done

GoogleCodeExporter commented 8 years ago

getting this error as well

Original comment by mhead1...@gmail.com on 26 Apr 2013 at 3:11

GoogleCodeExporter commented 8 years ago

So am i

Original comment by RobbinSp...@gmail.com on 14 May 2013 at 11:08

GoogleCodeExporter commented 8 years ago

me 2 with fedora17

Original comment by 505boot...@gmail.com on 12 Feb 2014 at 2:18

OpnSrcConstruction / subterfuge

Can't seem to make Subterfuge work?? Please help #71