0

I just started learning MITM attacks and I use MITMF to perfom these attacks. I have one question regarding to sslstrip. I notice that sslstrip only works when we first clear the cache and history in our victim's browser. Is this always the case? Or is there any workarounds for this?

I've been thinking of maybe doing a dns spoof and then running a script to clear all the cookies in the browser but I'm not sure if this will works.

edit : I do understand that sslstrip wont work on HSTS websites but will it work without having the victim to clear their cookies first?

  • I think this is discussed in depth in How does SSLstrip work? and SSL Strip Injection Point. In short: sslstrip needs a plain HTTP request to work. If the client already switched to HTTPS the attack will not work. Since the browser initially does plain HTTP unless it knows otherwise it will work when the browser knows nothing about the target yet. – Steffen Ullrich May 20 at 14:26
  • @SteffenUllrich my question is simply asking if sslstrip works without the victim having to clear their cookies first. – Andi Perkaa May 20 at 14:29
  • This is completely unrelated to cookies. Please read the information I've linked to. – Steffen Ullrich May 20 at 14:30
0

I do understand that sslstrip wont work on HSTS websites but will it work without having the victim to clear their cookies first?

This is completely unrelated to cookies.

SSLStrip works as long the browser thinks that the site can be accessed by plain HTTP. If the site response with HSTS or has pre-loaded HSTS the browser knows to access the site next time or even first time with HTTPS.

Similar if the site issues a 301 permanent redirect to HTTPS the browser will next time skip the plain HTTP request and access this new HTTPS-URL directly (affects only the specific URL and not the whole site). I think you are confusing this 301 with the cookies.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.