SSLstrip is an attack against mixed HTTP/HTTPS connection where a man-in-the-middle downgrades HTTPS links to HTTP.

learn more… | top users | synonyms

15
votes
0answers
217 views

Bypassing HTTP to HTTPS cached 301 redirect to use SSLstrip

I'm doing some pen. tests on a HTTPS (443) server that does not have HSTS implemented (no HSTS headers on response and the address is not on Chrome HSTS preload list). The problem is that in my ...
1
vote
0answers
46 views

SSLStrip not working on custom ports

I have been using sslstrip for a while and it works fine on websites on which HSTS is not enabled. However when the SSL server is running on some custom ports sslstrip fails. eg: For links like ...
0
votes
0answers
152 views

sslstrip not stripping any redirected traffic

I am using the following configuration to set up sslstrip sudo echo "1" > /proc/sys/net/ipv4/ip_forward sudo iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 666 ...