Results 1 to 5 of 5

Thread: How to use driftnet properly.

  1. #1
    Join Date
    2013-Sep
    Posts
    14

    How to use driftnet properly.

    Hi,

    I see many questions about driftnet that it doesn't show pictures from other PC's but are able to see their own. So I decided to post a small instruction about how to do it.
    We have 2 options.
    Option one is to see the whole network and option 2 is to specify an IP. I assume you'd love to do the whole network and check what your Girlfriend is watching :-)

    All you need to do is to open 2 terminals. I'm using wlan0 as my wireless network.
    Terminal 1 type the following to start ettercap.

    ettercap -Tqi wlan1 -M arp:remote // //

    Then start terminal 2 and start driftnet.
    driftnet -i wlan0

    That's it. This will definiteley work.

    Peace.

  2. #2
    Join Date
    2014-Mar
    Posts
    1
    Quote Originally Posted by Attilafx View Post
    Hi,

    I see many questions about driftnet that it doesn't show pictures from other PC's but are able to see their own. So I decided to post a small instruction about how to do it.
    We have 2 options.
    Option one is to see the whole network and option 2 is to specify an IP. I assume you'd love to do the whole network and check what your Girlfriend is watching :-)

    All you need to do is to open 2 terminals. I'm using wlan0 as my wireless network.
    Terminal 1 type the following to start ettercap.

    ettercap -Tqi wlan1 -M arp:remote // //

    Then start terminal 2 and start driftnet.
    driftnet -i wlan0

    That's it. This will definiteley work.

    Peace.

    Thanks so much for this.... I am new to Linux, and I have been trying these recently by doing everything separately (following other turorials where you specify device IP address, etc).

    This worked great. Since no IP addresses were specified, I'm assumming that ettercap scans the network and automatically assigns the proper host and targets?

    Thanks,

    Matt!

  3. #3
    Join Date
    2013-Sep
    Posts
    14
    Exactly, the // // is the whole network of your interface that is connected. So if anybody connects to the network, it will add them. You should see that in your ARP window.

  4. #4
    Hi,

    I need some help, I'm trying to test a MITM attack in my own home network.

    I've different devices (notebook, smartphones,...) connected via wireless to my router and one PC connected via ethernet to the same router.

    In a Terminall of my notebook where is installed Kali Linux 1.0.6 I've type:

    ettercap -Tqi wlan0 -M arp:remote // //

    Then I've started terminal 2 and I've started driftnet.
    driftnet -i wlan0


    Then using the PC connected by ethernet I've opened a Chrome Borwser and searched some image in Google Images but in the notebook I can't see anything...(I can see something only if I search images in the notebook browser)

    What am I doing wrong? Please help, Thx

  5. #5
    Join Date
    2016-Jul
    Posts
    1
    There's one step that you might have missed:

    echo "1">/proc/sys/net/ipv4/ip_forward

    Then check this after you run ettercap. If the ip_forward isn't on, you can't get anything (at least, it didn't work for me until I did this).

    Thanks for the help; I've been trying driftnet for years without success.

Similar Threads

  1. driftnet now working.
    By r060x in forum General Archive
    Replies: 0
    Last Post: 2021-01-04, 05:03
  2. Urlsnarf and Driftnet are only capturing localhost traffic
    By Abdiction in forum General Archive
    Replies: 9
    Last Post: 2015-03-15, 11:10

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •