Questions tagged [sslstrip]
SSLstrip is an attack against mixed HTTP/HTTPS connection where a man-in-the-middle downgrades HTTPS links to HTTP.
110 questions
0
votes
0
answers
22
views
SSL stripping - initiate HTTPS or HTTP first? [duplicate]
I am quite confused. I have been reading about SSL stripping and what I have found is that
The client (victim) has to initiate the first connection via HTTP
The server will redirect to HTTPS - here ...
0
votes
0
answers
466
views
sslstrip partially working
I'm currently working on a MITM + sslstrip attack educational talk to create awareness on the importance on checking certificates specially if connected to public WiFi and having strong WiFi passwords ...
- 101
0
votes
1
answer
2k
views
MITM: sslstrip + mitmdump
I'm doing some MITM injection with mitmdump (mitmproxy):
mitmdump -s 'injection.py' -m transparent
it works perfectly (over HTTP) as intended.
Then I heard of SSLstrip :
sslstrip -l 8080
which ...
- 3
0
votes
0
answers
175
views
Mitf SSLStrip2 Can HSTS still be Bypassed [duplicate]
So back in 2015 there was a lot of talk about a method in which HSTS could be bypassed. Basically here is the method:
Most people type a url without adding http:// or https:// or simply click a link ...
- 513
0
votes
0
answers
38
views
Why doesn't Google login enforce ssl redirect at the server end? [duplicate]
I was playing about with ssl strip against an ie8 target, just for learning more about it. To my surprise I was able to capture the credentials of the ie8 victim when signing into Google accounts.
I ...
- 293
-1
votes
1
answer
1k
views
NET::ERR_CERT_AUTHORITY_INVALID with HSTS
This is strange error I am getting while using google.com on chrome browser for any website | Test done on Feb 5 2015
OS: Windows 7 32bit
https://www.google.com/?gws_rd=ssl
www.google.com
Your ...
- 1
-1
votes
1
answer
127
views
SSLStrip with autologin [closed]
What can I do to sniff the traffic by SSLStrip when the user has automatic login to the site?
- 145
-1
votes
1
answer
3k
views
mitmproxy: Error starting proxy server: OSError(98, 'Address already in use') [closed]
I just installed mitmproxy tool. I want to run it. Once I type: sudo mitmproxy I get this error:
Error starting proxy server: OSError(98, 'Address already in use')
I searched and found some ...
- 113
-1
votes
2
answers
3k
views
what is the different between X.509 certificate and 2-way SSL? or both are same? [duplicate]
Can anyone clarify what is the difference between an X509 certificate and two-way SSL? or both are same?
- 101
-1
votes
1
answer
400
views
SSL Stripping + HSTS [duplicate]
What do you think would happen if someone accesses a site that has the HTST mechanism enabled, for the first time? Would SSL Stripping still be possible?
