All Questions
Tagged with sslstrip tls-intercept
9 questions
0
votes
0
answers
1k
views
Monitor HTTPS URL logging of a specific device of a Network
Goal
The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store.
Ex. Alexa, Chromecast, and maybe ...
- 125
0
votes
0
answers
22
views
SSL stripping - initiate HTTPS or HTTP first? [duplicate]
I am quite confused. I have been reading about SSL stripping and what I have found is that
The client (victim) has to initiate the first connection via HTTP
The server will redirect to HTTPS - here ...
-1
votes
1
answer
3k
views
mitmproxy: Error starting proxy server: OSError(98, 'Address already in use') [closed]
I just installed mitmproxy tool. I want to run it. Once I type: sudo mitmproxy I get this error:
Error starting proxy server: OSError(98, 'Address already in use')
I searched and found some ...
- 113
1
vote
1
answer
2k
views
Prevent bypassing of SSL Pinning in android application
I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an ...
6
votes
0
answers
648
views
Why are banks largely absent from the HSTS preload list?
There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
- 61
3
votes
2
answers
1k
views
Is this possible with SSLsplit?
SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs forged X509v3 certificates on-the-fly, based on ...
- 121
1
vote
0
answers
95
views
Do we need vpn now that we have browser with https enabled? [duplicate]
I understand that vpn is used to encrypt our data before sending it to a server on the internet so that no one can read our data (for eg in man in the middle attack).
Now that we have browser with ...
- 111
1
vote
1
answer
701
views
SSL Strip Injection Point
I am reading up on SSL stripping and I have a fundamental question on the injection point that makes this MITM attack a success. I understand the typical scenario -
A (victim) <-- plain --> M (...
- 563
6
votes
2
answers
2k
views
Can the network administrator of my university see what I have searched on Google?
Before you mark this one as a duplicate, I have indeed seen similar questions here but they do not provide the direct answer I'm seeking.
Here are a few details:
I've taken google as an example ...
- 61