Collaborate Disseminate
I have a question concerning the usage of SSLstrip2 to bypass HSTS on websites.
I managed to successfully install and deploy SSLStrip2 (in combination with DNS2Proxy). This means that when using a browser and visiting a web… Continue reading SSLStrip2 and HSTS
SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs forged X509v3 certificates on-the-fly, based on the original server ce… Continue reading Is this possible with SSLsplit?
This question already has an answer here:
I am running sslstrip on my home network. I would like on my computer (the one running sslstrip) to strip the Https->Http traffic in order to see how facebook (example) communicates with my computer and vise versa. I want the victim to be me. Is this possible with sslstrip?
Thank you
Continue reading How to perform sslstrip on the computer using sslstrip? [duplicate]
So back in 2015 there was a lot of talk about a method in which HSTS could be bypassed. Basically here is the method:
Most people type a url without adding http:// or https:// or simply click a link which directs them to th… Continue reading Mitf SSLStrip2 Can HSTS still be Bypassed
I’ve recently become a fan of MITM attacks and had some fun hacking by manipulating HTTPS requests and responses in a couple tests.
I did this using mitmproxy and installing the certificate on my phone.
I would like to be a… Continue reading Generic SSL/TSL descryptor tool [on hold]
I’ve recently become a fan of MITM attacks and had some fun hacking by manipulating HTTPS requests and responses in a couple tests.
I did this using mitmproxy and installing the certificate on my phone.
I would like to be a… Continue reading Generic SSL/TSL descryptor tool [on hold]
My scenario:
I connected to an open WiFi at Kuala Lumpur Airport to read a news site from home (I know I was being absolutely careless).
I forgot to turn off sync on my Android phone, so all my apps “fired”.
2 minutes later… Continue reading Is Android Gmail app susceptible to MITM, sslstrip? If yes, how?
I am pondering about SSL Stripping attack. But is there any way to prevent this attack by DNSSEC or IPSEC?
Continue reading Is it possible to prevent SSL stripping attack via DNSSEC or IPSEC?
Im trying to set up a fake AP using aircrack-ng suite, DHCP server & iptables.
After creating the fake AP:
airmon-ng start wlan1
airbase-ng -c 11 -e “freewifi” wlan1mon
running iptables configuration and at0 routin… Continue reading Setting up a fake AP – problem with iptables or DHCP server
I watched a video on youtube about using SSLstrip after conducing a MITM using arpspoof. The video, unfortunately, didn’t provide any information about how it works. During the video, the guy typed
iptables -t nat -A PREROUTING -p tcp –d… Continue reading Why do we redirect port 80 traffic for SSLstrip and not 443? [duplicate]