All Questions
55 questions
0
votes
1
answer
2k
views
How to perform MitM against SSL/TLS when certificate owned?
Performing a local network man-in-the-middle (MitM) attack is fairly straightforward, especially when the traffic is unencrypted HTTP. There are other approaches to encrypted SSL/TLS HTTPS connections,...
- 211
0
votes
1
answer
232
views
Redirect client to no SSL as MITM
I'm pen testing a setup where I have an AP that I control (using wifipumkin3) and DNS spoofing to redirect the known endpoint for a firmware update. When the device requests for an update, I'm ...
- 31
0
votes
1
answer
382
views
Can Proxy insert headers to a HTTPS requests which are on the same network?
I was reading about host header injection and found many reports on hackerone.
Assume that if you inject X-Forwarded-Host header to specific requests, you may cause a redirect which can impact the ...
- 23
0
votes
0
answers
343
views
SSL stripping - how is it possible to send back the HTTP page? [duplicate]
Been trying to wrap my head around SSL stripping.
An explanation here writes:
Keep in mind, however, that when you install SSL, you’re essentially creating a duplicate of your website with HTTPS URLs....
1
vote
1
answer
519
views
Does sslstrip have to do something with Bettercap's certificate?
I am trying to perform a MITM attack using bettercap against a website that doesn't have the HSTS security policy implemented at all.
When I try the following command: bettercap -T ...
- 43
0
votes
0
answers
55
views
the difference between SSL pinning and using just HTTPS connection [duplicate]
I know that if i used HTTPS the connection will established after the handshake so (the user will ping the the link then the server will give him public key so the client can provide him with ...
22
votes
2
answers
5k
views
Is there any point in having the HSTS header enabled when using HTTP/2?
As a protection against attacks such as SSLstrip, the HSTS header prevents an attacker from downgrading a connection from HTTPS to HTTP, as long as the attributes of the header are properly configured....
- 363
1
vote
1
answer
1k
views
Is SSL-strip still viable as a method of attack?
Seeing as SSL-strip works by intercepting redirects and links to HTTPS, is this still a viable MITM attack now that most (all?) up to date browser go for HTTPS by default? Is there an alternative more ...
- 113
3
votes
0
answers
310
views
Experimenting with SSLStrip+ on the same machine
I am trying to play around to understand how SSLStrip+ works by:
$ cat /proc/sys/net/ipv4/ip_forward
1
$ sudo iptables --flush
$ sudo iptables --flush -t nat
$ sudo iptables -t nat -A PREROUTING -p ...
- 153
6
votes
0
answers
648
views
Why are banks largely absent from the HSTS preload list?
There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
- 61
10
votes
3
answers
11k
views
Does sslstrip work only on websites which use both HTTP and HTTPS?
Does sslstrip attack only work on websites which uses both HTTP and HTTPS? On Quora a commenter says that:
One thing to note is that, SSL Strip only works on websites which uses
both HTTP & ...
- 529
1
vote
1
answer
430
views
SSLStrip redirects too many times
I am attempting to use SSLStrip on a website which has HSTS disabled, I specifically type the website URL with http:// and it refuses to load in Safari, Chrome and a random chinese browser because of ...
2
votes
2
answers
528
views
Can enforcing a website to serve SSL requests only prevent SSLstrip from working?
I understand running a website with HSTS can help prevent an attacker using KRACK to downgrade the website to serve HTTP requests.
What if our web server does not support HSTS?
IIS has a setting ...
- 503
4
votes
1
answer
2k
views
SSLStrip2 and HSTS
I have a question concerning the usage of SSLstrip2 to bypass HSTS on websites.
I managed to successfully install and deploy SSLStrip2 (in combination with DNS2Proxy). This means that when using a ...
- 183
3
votes
2
answers
1k
views
Is this possible with SSLsplit?
SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs forged X509v3 certificates on-the-fly, based on ...
- 121
0
votes
0
answers
175
views
Mitf SSLStrip2 Can HSTS still be Bypassed [duplicate]
So back in 2015 there was a lot of talk about a method in which HSTS could be bypassed. Basically here is the method:
Most people type a url without adding http:// or https:// or simply click a link ...
- 513
0
votes
1
answer
334
views
Is it possible to prevent SSL stripping attack via DNSSEC or IPSEC?
I am pondering about SSL Stripping attack. But is there any way to prevent this attack by DNSSEC or IPSEC?
- 101
3
votes
1
answer
718
views
Can HTTPS-Everywhere Prevent An SSL-Stripping Attack?
If I set HTTPS-Everywhere to block all unencrypted requests, and my connection is man-in-the-middled by a malicious Tor exit node when I connect to a website that, by default, uses HTTPS, then will ...
- 155
1
vote
0
answers
881
views
Why do we redirect port 80 traffic for SSLstrip and not 443? [duplicate]
I watched a video on youtube about using SSLstrip after conducing a MITM using arpspoof. The video, unfortunately, didn't provide any information about how it works. During the video, the guy typed
...
- 656
34
votes
6
answers
35k
views
Can a secure cookie be set from an insecure HTTP connection? If so, why is it allowed?
With reference to some security paper I read, I found out that a cookie with the secure flag set can only be sent by the client over connections that are using HTTPS, not HTTP, but the cookie itself ...
- 541
6
votes
2
answers
2k
views
Can the network administrator of my university see what I have searched on Google?
Before you mark this one as a duplicate, I have indeed seen similar questions here but they do not provide the direct answer I'm seeking.
Here are a few details:
I've taken google as an example ...
- 61
1
vote
1
answer
961
views
Why does SSLStrip fail when user types HTTPS?
During an HTTPS connection between a browser and server -- Is the very first packet from the browser encrypted? My guess is that the answer is "NO" because encryption should only begin after the ...
- 1,576
0
votes
1
answer
103
views
Which HTTPS certificate is the content verified by if the content comes from multiple servers?
If a webserver has an HTTPS certificate and a page on the server pulls resources from other webservers - maybe a CDN with a protocoless path, or not, for things like static images, stylesheets, and ...
- 1,471
4
votes
2
answers
2k
views
SSL browser session keys
I am trying to export/write the SSL master secret and keys to a file from the chromium browser. I would appreciate if someone could advice me how to do this.
To write the premaster secret we can ...
- 51
17
votes
1
answer
11k
views
What is the difference between MITMproxy and SSLsplit?
I am aware that MITMproxy only captures HTTP/HTTPS protocols where SSLsplit is a transparent proxy and therefore can capture also other non-HTTP protocol communications. However MITMproxy can operate ...
- 669
-1
votes
2
answers
3k
views
what is the different between X.509 certificate and 2-way SSL? or both are same? [duplicate]
Can anyone clarify what is the difference between an X509 certificate and two-way SSL? or both are same?
- 101
0
votes
1
answer
95
views
Could you add SSL to a stripped stream?
I have been thinking about an attack for SSL that would allow a third party to log all transmitted data. My idea is that you modify the client to connect to the server without SSL enabled and modify ...
- 103
1
vote
0
answers
364
views
SSLStrip and bank portals [closed]
I am trying to use SSLstrip tool with Ettercap on Kali Linux to attack my personal bank account and yahoo account for testing purposes.
I followed the instructions of this video (I run it on Kali ...
- 11
26
votes
3
answers
8k
views
Bypassing HTTP to HTTPS cached 301 redirect to use SSLstrip
I'm doing some pen. tests on a HTTPS (443) server that does not have HSTS implemented (no HSTS headers on response and the address is not on Chrome HSTS preload list).
The problem is that in my ...
- 361
2
votes
1
answer
285
views
What was the first version of Android to use OpenSSL (and what version was it)? What was used prior?
Android 1.6 source is the earliest I can find that references openssl
(i.e., has OPENSSL_VERSION[_TEXT] defined
The script I ran to get these versions was:
$ git clone https://android.googlesource....
- 207
16
votes
2
answers
7k
views
Is an HTTP 301 redirect to HTTPS, insecure?
For a website, I force a 301 redirect from http://login.example.com to https://login.example.com using a .htaccess file.
As I read in this question this still imposes a security threat. I'm wondering ...
- 163
5
votes
1
answer
709
views
Ways to defeat SSL
I saw this video in which the guy talks about ways to defeat SSL. But the video is 4 years old. I wanted to know if these attacks are relevant even now, or some updates have been made to tackle these.
...
- 153
245
votes
14
answers
48k
views
My college is forcing me to install their SSL certificate. How to protect my privacy?
My college administration is forcing us to install Cyberoam Firewall SSL certificate so that they can view all the encrypted traffic to "improve our security". If I don't install the certificate than ...
- 2,171
4
votes
2
answers
446
views
SSLStrip still HTTPS
I did all the configuration right. IPtables, port forwarding, ARPspoof, everything.
However, in the browser websites like Facebook and Twitter are still HTTPS.
What am I doing wrong?
- 145
-1
votes
1
answer
127
views
SSLStrip with autologin [closed]
What can I do to sniff the traffic by SSLStrip when the user has automatic login to the site?
- 145
2
votes
1
answer
469
views
Using SSLStrip, password is still encrypted
I did SSLStrip on my network (for educational purpose only!)
And I've got the username and all.
system=Test&uid=dixon01&__password=hkulqlyhza&command=login&password=320dd485b1834cf8%...
- 145
4
votes
1
answer
3k
views
Why does sslstrip+ fail to intercept the traffic from websites like facebook and gmail?
I have been reading an article about sslstrip and mitm. Before the introduction of HSTS it was possible to strip ssl and send an insecure http page to the victim. Anyway it was overcome by using HSTS ...
3
votes
2
answers
3k
views
SSL stripping in home network
I am trying to monitor the traffic of some "smart devices" in my home (TV, coffee machine, ...) but most of them communicate over SSL.
What possibilities are there to look into SSL encrypted ...
- 171
12
votes
1
answer
14k
views
How does bypassing HSTS with SSLSTRIP+ work exactly?
I am doing research on bypassing HSTS. I read this guide on bypassing HSTS using SSLSTRIP+, but there are a few things that I don't understand.
First thing to do is to fire up MITMf in SSLstrip+ ...
- 327
1
vote
3
answers
2k
views
Preventing SSL strip attack
Is it possible to detect a SSL strip attack by checking whether the page delivered is HTTPS or HTTP using JavaScript? I am assuming that the response page is HTTPS page instead of HTTP?
- 349
0
votes
1
answer
548
views
Website using http and https
Is there any method to know whether a website is https only or uses http webpages as well?Can it be done without using browsers cache?
- 349
1
vote
1
answer
137
views
Does SSL/TLS have the feasibility of detecting malicious things during transmission? [closed]
As per my knowledge the current implementation of SSL/TLS does not have the capability to identify the data is malicious or not during the transmission or before encrypt the data.
If its have , kindly ...
- 1,140
0
votes
1
answer
1k
views
Why is a valid SSL certificate required for SSL-Strip?
From what understand, SSL-Strip sits between the target user and the server, establishing a HTTPS connection between itself and the server, and an unsecured, plain old HTTP channel between itself and ...
- 6,935
1
vote
2
answers
5k
views
SSLStrip vs HSTS
I've heard about the new SSLStrip and how it is able to bypass HSTS.
Where can I find an article that talks about this?
How does this work?
Where can I download it? Moxie's website has not been ...
- 135
8
votes
4
answers
7k
views
Mitigating SSLStrip by only serving a site over HTTPS?
So I just learned about SSLStrip now--I feel like I'm so late to the game. What I want to know is: If your site only serves content over HTTPS and hard fails on HTTP requests, with no redirect, are ...
- 2,292
5
votes
1
answer
19k
views
Why is the deprecated SSL 2.0 protocol considered insecure and how can it be exploited?
I am making a presentation to the class about "SSL 2.0 deprecated protocol" and I really have no idea how this exploit is used or how the attacker can use this vul. I understand the impact of this vul,...
- 61
1
vote
2
answers
625
views
Does Skype Trump SSLStrip?
I am using SSLStrip against my own computer, but am not being redirected to HTTP. Skype automatically starts up and logs in at my computer's startup, so I was wondering whether the fact that port 80 ...
- 2,327
0
votes
2
answers
1k
views
How to MiTM SSL on a device with no proxy settings
I'm trying to MiTM a device on my network and having some problems.
SSLstrip doesn't work because the URL is https://, and I can't use something like Fiddler because the device has no configurable ...
- 3,248
106
votes
5
answers
149k
views
How does SSLstrip work?
I've been reading up on SSLstrip and I'm not 100% sure on my understanding of how it works.
A lot of documentation seems to indicate that it simply replaces occurrences of "https" with "http" in ...
- 3,248
5
votes
2
answers
9k
views
Protecting against SSL Strip [duplicate]
I've read you can attack connections using tools like sslstrip, if you are on the same network. So what ensures that our SSL connections remain safe?
Does it depend on the cert strength?
Do you have ...
- 539