airssl.sh creates a fake access point using Airbase-ng and uses sslstrip to bypass ssl encryption, it also offers the user the choice to use Driftnet to capture images.
Work on Ubuntu 14.04 and less, if you are not ethernet, you will need two wireless cards.
Driftnet, Ettercap, DHCP, Aircrack and SSLStrip
$ su root
$ apt-get update
$ apt-get upgrade
$ apt-get install driftnet ettercap-graphical isc-dhcp-server sslstrip aircrack-ngClone git repository :
$ cd /etc/
$ clone git https://github.com/Enzo7337/airssl.git
$ chmod 755 /etc/airssl/airssl.shIf git is not installed
$ apt-get install gitPut yourself in as root:
$ su rootGo to the airssl directory :
$ cd /etc/airssl/Run script :
$ ./airssl.shFollow the instructions
Contact me if you encounter any bugs so that I correct them.
Sometimes upon rising DHCP server informs about permission errors like
Can't open /etc/dhcp/dhcp.conf: permission denied
or
Can't open /var/lib/dhcp/dhcpd.leases: permission denied.
or
Can't open /pentest/wireless/airssl/dhcpd.conf: Permission denied
If after checking the permissions are found to be correct, check apparmor profile for dhcpd:
$ sudo apparmor_statusIf /usr/sbin/dhcpd is in the list of profiles do the following:
- Stop apparmor deamon
$ sudo /etc/init.d/apparmor stop- Edit /etc/apparmor.d/usr.sbin.dhcpd with root permissions :
$ nano /etc/apparmor.d/usr.sbin.dhcpd- And ensure that file has following lines:
/etc/dhcp/ r,
/etc/dhcp/** r,
/etc/dhcpd{,6}.conf r,
/etc/dhcpd{,6}_ldap.conf r,
/pentest/wireless/airssl/dhcpd{,6}.conf r,
/usr/sbin/dhcpd mr,
/var/lib/dhcp/dhcpd{,6}.leases* lrw,
/var/log/ r,
/var/log/** rw,
/{,var/}run/{,dhcp-server/}dhcpd{,6}.pid rw,- Start apparmor deamon
$ sudo /etc/init.d/apparmor startAfter this operation apparmor deamon will allow dhcp server to open /etc/dhcp/dhcpd.conf or /var/lib/dhcp/dhcpd.leases files. For more information see man apparmor
La traduction en français arrive bientôt !