search

touyachrist / nighthawk

Automatically exported from code.google.com/p/nighthawk
0 stars 0 forks source link

Sniffing problem #2

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
I'm having trouble sniffing my wireless networks.  the first one, i start 
sniffing and it starts doing something (ssl strip is doing something, just not 
the sniffer) I tried both a quick attack, and an advanced attack.  neither 
resolved this problem.  I am running it unblocked, and in admin mode, and not 
using compatibility mode. I will attach two screen shots (ip addresses blocked 
out) to see if they help.  also i am running the winpcap server and had it 
running before i even started nighthawk (if that makes any difference)

Original issue reported on code.google.com by Weston...@gmail.com on 28 Oct 2011 at 1:12

Attachments:

GoogleCodeExporter commented 9 years ago 
here is the error log

Original comment by Weston...@gmail.com on 28 Oct 2011 at 1:40

Attachments:

GoogleCodeExporter commented 9 years ago 
Hi, sorry for the late response.

So the issue is that you are unable to sniff any user credentials? Have you 
tried with Facebook or web forums (phpBB based or similar)? 

I might soon create a simple test page for verifying that Nighthawk actually 
works and you'll be able to try it again and possibly determine the reason why 
it doesn't show you anything at present.

As far as the crash is concerned, I think I have fixed it in the next build 
(0.9.1) and I'll be uploading it soon.

Original comment by klemen.b...@gmail.com on 8 Nov 2011 at 9:16

GoogleCodeExporter commented 9 years ago 
The problem is I don't get any packets/webpages at all.  I posted the screen 
shots. I tried Facebook and other sites but it just didn't manage to pick up 
any packets.  At test site would be a great idea just to insure that everything 
is working.  When you post the new version I will download and install it to 
see if it works. I hope we can resolve this issue as I would very much like to 
see this tool working right! Keep up the good work!

Original comment by Weston...@gmail.com on 9 Nov 2011 at 1:54

GoogleCodeExporter commented 9 years ago 
Hi, the 0.9.1 version is up, so we can now debug any crashes you may encounter 
(after the exception window opens click "Send and quit" and instead of a .TXT 
file you will now see a .ZIP file with error information that you can attach 
here).

I've also created a simple test page that you can open on your "victim" 
computer and play with it - http://dev.bratec.si/nighthawk/.

Original comment by klemen.b...@gmail.com on 13 Nov 2011 at 12:23

GoogleCodeExporter commented 9 years ago 
Ok, so i got it to work!!! it might have something to do with me running 
windump and rpcap on my computer at the same time in coordination with night 
hawk... im not sure.  anyhow, i was playing with the link you provided and it 
was working fine.  i captured credentials from the site.  however i cannot seem 
to capture credentials from any other sites (facebook, gmail).  perhaps im 
doing something wrong but idt so. the ssl stripper is working correctly 
according to the test site so im a bit bewildered.

Original comment by Weston...@gmail.com on 16 Nov 2011 at 8:20

GoogleCodeExporter commented 9 years ago 
Hm... it looks like Facebook is defaulting to "https". If you visit 
"facebook.com" by directly typing in "https://facebook..." this won't work 
(which is not what a majority does - I've tried it :P). And about GMAIL... it 
won't work because it only allows connections through HTTPS (the original 
"linux" version of SSLstrip can do this, but it is damn hard to do something 
similar on windows).

If you visit facebook through the ordinary home page (https://facebook.com/), 
Nighthawk should capture the credentials. If the user is already logged in, it 
should also log him out (when "strip cookies" is enabled - it won't, however, 
do it when https mode is enabled).

Original comment by klemen.b...@gmail.com on 16 Nov 2011 at 8:28

GoogleCodeExporter commented 9 years ago 
it dosent work for me nothing show in userneme and password plz help
creat a video tutorial if u can ..m waiting ........pm me shoaib00226@gmail.com

Original comment by shoaib00...@gmail.com on 23 Jun 2012 at 9:39

GoogleCodeExporter commented 9 years ago

Original comment by klemen.b...@gmail.com on 12 Nov 2013 at 5:07