Collaborate Disseminate
With reference to some security paper I read, I found out that a cookie with the secure flag set can only be sent by the client over connections that are using HTTPS, not HTTP, but the cookie itself can be set from the server with a secure… Continue reading Can a secure cookie be set from an insecure HTTP connection? If so, why is it allowed?
I want to perform a MITM attack on my own network, and followed several tutorials on how to use sslstrip, iptables and arpspoof.
But every time I perform the attack, I lose the connection on the target device for almost ever… Continue reading SSL Strip on Fedora24
I want to perform a MITM attack on my own network, and followed several tutorials on how to use sslstrip, iptables and arpspoof.
But every time I perform the attack, I lose the connection on the target device for almost ever… Continue reading SSL Strip on Fedora24
I’m doing some pen. tests on a HTTPS (443) server that does not have HSTS implemented (no HSTS headers on response and the address is not on Chrome HSTS preload list).
The problem is that in my scenario the user has visited … Continue reading Bypassing HTTP to HTTPS cached 301 redirect to use SSLstrip
I have been using sslstrip for a while and it works fine on websites on which HSTS is not enabled. However when the SSL server is running on some custom ports sslstrip fails. eg: For links like https://example.com:400 the str… Continue reading SSLStrip not working on custom ports
I have been using sslstrip for a while and it works fine on websites on which HSTS is not enabled. However when the SSL server is running on some custom ports sslstrip fails. eg: For links like https://example.com:400 the str… Continue reading SSLStrip not working on custom ports
I have been reading an article about sslstrip and mitm. Before the introduction of HSTS it was possible to strip ssl and send an insecure http page to the victim. Anyway it was overcome by using HSTS which collects the url of… Continue reading Why does sslstrip+ fail to intercept the traffic from websites like facebook and gmail?
How can I intercept & parse through the SSL traffic (incoming & outgoing) generated by my iPad application?
I am trying to understand how to bypass HSTS protection. I’ve read about tools by LeonardoNve ( https://github.com/LeonardoNve/sslstrip2 and https://github.com/LeonardoNve/dns2proxy ).
But I quite don’t get it.
If the clien… Continue reading HSTS bypass with SSLstrip2 + DNS2proxy
I am making a presentation to the class about “SSL 2.0 deprecated protocol” and I really have no idea how this exploit is used or how the attacker can use this vul. I understand the impact of this vul, but I need a complete explanation on … Continue reading Why is the deprecated SSL 2.0 protocol considered insecure and how can it be exploited?