MITM Attack using Ettercap and Packet Analyzing using Wireshark

 It is an attack in computer networks where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other. It is an active eavesdropping in which the attacker can alter the message in the communication ie, the entire conversation can be controlled by the attacker and inject new ones.

Ettercap is probably the most widely used MITM attack tool. Ettercap enables us to place ourselves in the middle between two machines. It basically a suite of tools to simplify MITM attacks. It can be used either from the command line (CLI) or the graphical user interface (GUI). Ettercap is GUI based tool built in Kali linux and that has been used in MITM attack here.

Step 1: Start ettercap  by typing following command in terminal as kali > ettercap –G and the ettercap GUI will start as shown below.

Then select the primary interface as shown below and click on start as shown above

Wait until it shows message " Starting Unified Sniffing " as shown below:-

Make sure your target should be in your network to know that scan for host:-

Now you will get your hosts list as below :-

Now add victims IP Address to Target 1 and your IP Address to Target 2 

And Go for ARP Poisoning :-

It will show as shown below Go for Sniff Remote Connections:-

After clicking OK you can monitor packets between victim and Router:-

Step 2:- start Wireshark to analyse the packets

for testing I have searched http site in victims device 

THAT'S ALL WE HAVE SUCCESSFULLY PERFORMED MITM ATTACK