Full Disclosure mailing list archives

RE: anybody remember the name of this tool


From: "Michael L Benjamin" <mike.benjamin () clarinet com au>
Date: Tue, 6 Sep 2005 14:48:40 +0800


I have the Windows version of Ettercap 0.6.b installed and running, it uses WinPcap 2.3. 

I also have Ettercap-NG running which sports a GUI, but needed WinPcap 3.1 beta 4 for that one I think. As it
didn't come shipped with WinPcap it took some trial and error to find a version that worked properly on XP. The GUI 
gives a pretty good picture of what sessions are active on the network when sniffing a switch. :)

I have seen some instability with Ettercap-NG though I think.


-----Original Message-----
From: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of 
Martes13
Sent: Tuesday, September 06, 2005 02:28 PM
To: full-disclosure () lists grok org uk
Subject: Re: [Full-disclosure] anybody remember the name of this tool

http://excalibar.sourceforge.net/

On 9/5/05, Ragone_Andrew <kc2lto () gmail com> wrote:
Cain absolutely does not let you change the packets let alone see 
their contents (within the program anyway). I do not know about a 
Windows utility that does this however a linux one is called Ettercap.
http://ettercap.sourceforge.net/ Actually, if you go to the SF page, 
it does say it runs under Windows but I have never tried it. Let me 
know if this is what you are looking for...
 
 -Andrew


On 9/5/05, Bernardo Martín <bmartin () desic-sl com> wrote:
May be Cain?




-----Mensaje original-----
De: trihuynh () huynhsec com [mailto:trihuynh () huynhsec com] Enviado el: 
miércoles, 24 de agosto de 2005 11:30
Para: full-disclosure () lists grok org uk
Asunto: [Full-disclosure] anybody remember the name of this tool

Hi all,

I forget the name of a tool that can be used to intercept TCP packet 
and allow you to modify the packet before it was sent out. Basically 
the tool open 2 ports, one for listening and one for sending, it 
allows you to
watch
and modify packets in and out. It is like a port forwarding tool 
with a packet modifying feature (support editting on both side 
receive and sending).
I remember the tool run on Windows and have a nice GUI with hex editor.
It has been a while for me since the last time using such tool, i 
cannot remember the name of it. Google doesn't yeild the right 
result and it is
not
netsed which is commandline and *Nix based.
I hope some of us here can remember the tool name.

Thanks

_______________________________________________
Full-Disclosure - We believe in it.
Charter:
http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/ 
_______________________________________________
Full-Disclosure - We believe in it.
Charter:
http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


 
_______________________________________________
Full-Disclosure - We believe in it.
Charter:
http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: