Notices


Reply
Thread Tools
Posts: 111 | Thanked: 87 times | Joined on Jan 2010 @ Plovdiv, Bulgaria
#221
Originally Posted by price View Post
sorry i'm on kernel-power 47 and lastest CSSU. can it helps?
Pretty sure you don't have busybox-power installed.
__________________
http://pcsci3nce.info
 
Posts: 40 | Thanked: 5 times | Joined on Jan 2011
#222
i have busybox-power installed!
 
Posts: 83 | Thanked: 142 times | Joined on Jun 2011 @ Paris, France
#223
Originally Posted by price View Post
i have busybox-power installed!
It's weird that you had any output, since it's in busybox...
bipinbn has the right output though...

Are you guys trying this on your own network ? Did you saved the whole log file and searched for the credentials you submitted ?

Copy all the output to a pastebin so that we know what's going on. Make it disappear after one or two days, it would look bad if people found them while just searching for yamas
__________________
http://comax.fr/
"I like to dissect girls. Did you know I am utterly insane ?"
 
Posts: 40 | Thanked: 5 times | Joined on Jan 2011
#224
Originally Posted by comaX View Post
It's weird that you had any output, since it's in busybox...
bipinbn has the right output though...

Are you guys trying this on your own network ? Did you saved the whole log file and searched for the credentials you submitted ?

Copy all the output to a pastebin so that we know what's going on. Make it disappear after one or two days, it would look bad if people found them while just searching for yamas
yes i'm trying on my own network and my own account
i'm quite a noob, do you mean the output saved on /home/user/.yamas/ ?

i've attached my output. i hope it can help to solve my problem. I would love to try this script
Attached Files
File Type: zip test.txt.zip (362.0 KB, 405 views)

Last edited by price; 2011-06-29 at 17:21.
 
Posts: 40 | Thanked: 5 times | Joined on Jan 2011
#225
what do you think about a bad installation of sslstrip or of ettercap?
 
Posts: 83 | Thanked: 142 times | Joined on Jun 2011 @ Paris, France
#226
Originally Posted by price View Post
what do you think about a bad installation of sslstrip or of ettercap?
Might be... But I talked it over with Unhuman for a quite a longtime this afternoon, and our conclusion was : "well, ****, we don't know what's going on for those dudes."

i'll have a look at your file and report

EDIT : the file was just fine, something must have f*cked up during the parsing...

And it fails for some reason, check that you have /tmp/grepcred.txt and that it's not empty. For some reason, it happens to me from time to time... Maybe my host provider doesn't like too much requests at the same time...
__________________
http://comax.fr/
"I like to dissect girls. Did you know I am utterly insane ?"

Last edited by comaX; 2011-06-29 at 17:43.
 
Posts: 40 | Thanked: 5 times | Joined on Jan 2011
#227
Originally Posted by price View Post
yes i'm trying on my own network and my own account
i'm quite a noob, do you mean the output saved on /home/user/.yamas/ ?

i've attached my output. i hope it can help to solve my problem. I would love to try this script
For malicious people the username and pass that i've used for the test are fake don't spend time to try it.
 
Posts: 40 | Thanked: 5 times | Joined on Jan 2011
#228
Originally Posted by comaX View Post
Might be... But I talked it over with Unhuman for a quite a longtime this afternoon, and our conclusion was : "well, ****, we don't know what's going on for those dudes."

i'll have a look at your file and report

EDIT : the file was just fine, something must have f*cked up during the parsing...

And it fails for some reason, check that you have /tmp/grepcred.txt and that it's not empty. For some reason, it happens to me from time to time... Maybe my host provider doesn't like too much requests at the same time...
here is my grep output i can't see any -a option.. may be this the error?

BusyBox v1.18.5 (Debian 1.18.5power1) built-in shell (ash)
Enter 'help' for a list of built-in commands.

~ $ sudo gainroot
Root shell enabled


BusyBox v1.18.5 (Debian 1.18.5power1) built-in shell (ash)
Enter 'help' for a list of built-in commands.

/home/user # egrep
BusyBox v1.18.5 (Debian 1.18.5power1) multi-call binary.

No help available.

/home/user # grep
BusyBox v1.18.5 (Debian 1.18.5power1) multi-call binary.

Usage: grep [-HhnlLoqvsriwFE] [-m N] [-A/B/C N] PATTERN/-e PATTERN.../-f FILE [FILE]...

Search for PATTERN in FILEs (or stdin)

Options:
-H Add 'filename:' prefix
-h Do not add 'filename:' prefix
-n Add 'line_no:' prefix
-l Show only names of files that match
-L Show only names of files that don't match
-c Show only count of matching lines
-o Show only the matching part of line
-q Quiet. Return 0 if PATTERN is found, 1 otherwise
-v Select non-matching lines
-s Suppress open and read errors
-r Recurse
-i Ignore case
-w Match whole words only
-F PATTERN is a literal (not regexp)
-E PATTERN is an extended regexp
-m N Match up to N times per file
-A N Print N lines of trailing context
-B N Print N lines of leading context
-C N Same as '-A N -B N'
-e PTRN Pattern to match
-f FILE Read pattern from file

/home/user #
 
casper27's Avatar
Posts: 844 | Thanked: 521 times | Joined on Jan 2009 @ UK southampton
#229
Missing dependancy
ettercap-common
Should probably remove.
 
Saturn's Avatar
Posts: 1,648 | Thanked: 2,122 times | Joined on Mar 2007 @ UNKLE's Never Never Land
#230
For info..

New version in devel (0.9.4-1) with changes that comaX sent me.

changelog:
* Added option -d to force dependencies check.
* Dependency check will be run automatically unless it has been a success at least once.
* Corrected urls of files to download.
* Protected some tests better.
* Changed log storage folder to /home/user/yamas

Some other info from me:

- we avoid the MyDocs folder to store logs as it is not always available, e.g. when in mass storage mode.
- previous version is broken since I messed the urls to download the grepcred.txt file (sorry guys my fault completely).
Proposal to comaX: we could add the two files needing download in the package and provide updates on them with new distributions.
- the ettercap-common is a dependency (as is sslstrip) but the repos don't have a version atm. Have moved it to the proposed packages.
 
Reply

Tags
pentesting, tester of pens


 
Forum Jump


All times are GMT. The time now is 16:49.