Questions tagged [sslstrip]
SSLstrip is an attack against mixed HTTP/HTTPS connection where a man-in-the-middle downgrades HTTPS links to HTTP.
23
questions
102
votes
5
answers
145k
views
How does SSLstrip work?
I've been reading up on SSLstrip and I'm not 100% sure on my understanding of how it works.
A lot of documentation seems to indicate that it simply replaces occurrences of "https" with "http" in ...
- 3,208
245
votes
14
answers
47k
views
My college is forcing me to install their SSL certificate. How to protect my privacy?
My college administration is forcing us to install Cyberoam Firewall SSL certificate so that they can view all the encrypted traffic to "improve our security". If I don't install the certificate than ...
- 2,161
22
votes
4
answers
9k
views
Options when defending against SSLstrip?
I'm wondering, does anyone have any suggestions to defend against SSLstrip particularly?
- 321
15
votes
2
answers
14k
views
HSTS bypass with SSLstrip2 + DNS2proxy
I am trying to understand how to bypass HSTS protection. I've read about tools by LeonardoNve ( https://github.com/LeonardoNve/sslstrip2 and https://github.com/LeonardoNve/dns2proxy ).
But I quite don'...
- 253
8
votes
4
answers
7k
views
Mitigating SSLStrip by only serving a site over HTTPS?
So I just learned about SSLStrip now--I feel like I'm so late to the game. What I want to know is: If your site only serves content over HTTPS and hard fails on HTTP requests, with no redirect, are ...
- 2,262
12
votes
1
answer
14k
views
How does bypassing HSTS with SSLSTRIP+ work exactly?
I am doing research on bypassing HSTS. I read this guide on bypassing HSTS using SSLSTRIP+, but there are a few things that I don't understand.
First thing to do is to fire up MITMf in SSLstrip+ ...
- 327
15
votes
2
answers
6k
views
Is an HTTP 301 redirect to HTTPS, insecure?
For a website, I force a 301 redirect from http://login.example.com to https://login.example.com using a .htaccess file.
As I read in this question this still imposes a security threat. I'm wondering ...
- 153
10
votes
3
answers
10k
views
Does sslstrip work only on websites which use both HTTP and HTTPS?
Does sslstrip attack only work on websites which uses both HTTP and HTTPS? On Quora a commenter says that:
One thing to note is that, SSL Strip only works on websites which uses
both HTTP & ...
- 529
34
votes
6
answers
29k
views
Can a secure cookie be set from an insecure HTTP connection? If so, why is it allowed?
With reference to some security paper I read, I found out that a cookie with the secure flag set can only be sent by the client over connections that are using HTTPS, not HTTP, but the cookie itself ...
- 531
12
votes
2
answers
11k
views
How to thwart sslstrip attack?
I need help understanding the dynamics of an sslstrip attack. I'm using it to test the security of a site that I own. I can successfully sniff the victim (in this case, myself) credentials over the ...
- 1,557
5
votes
3
answers
2k
views
Is a company website secure against sslstrip if it doesn't use ssl on homepage but ssl everywhere else?
Most ecommerce websites use SSL/TLS when you want to log. But most have homepage using http only. Is it enough to have SSL/TLS on login page and logged page to prevent sslstrip ?
- 1,403
4
votes
1
answer
3k
views
Why does sslstrip+ fail to intercept the traffic from websites like facebook and gmail?
I have been reading an article about sslstrip and mitm. Before the introduction of HSTS it was possible to strip ssl and send an insecure http page to the victim. Anyway it was overcome by using HSTS ...
2
votes
1
answer
8k
views
sslstrip not working in LAN
I have a LAN with 3 machines connected to a switch. Two machines run Ubuntu 15.04, one with Apache SSL installed which works as the webserver. Another machine also running Ubuntu serves as the client. ...
- 173
26
votes
3
answers
6k
views
Bypassing HTTP to HTTPS cached 301 redirect to use SSLstrip
I'm doing some pen. tests on a HTTPS (443) server that does not have HSTS implemented (no HSTS headers on response and the address is not on Chrome HSTS preload list).
The problem is that in my ...
- 361
13
votes
1
answer
344
views
How can mobile sign-on be secured from imposter authentication screens?
History seems to have come almost full circle where old issues are shown in new/emerging technologies.
Background
If you trust the operating system, Windows originally had the Control - Alt - Delete ...
- 50.6k
5
votes
1
answer
18k
views
Why is the deprecated SSL 2.0 protocol considered insecure and how can it be exploited?
I am making a presentation to the class about "SSL 2.0 deprecated protocol" and I really have no idea how this exploit is used or how the attacker can use this vul. I understand the impact of this vul,...
- 61
4
votes
2
answers
2k
views
SSL browser session keys
I am trying to export/write the SSL master secret and keys to a file from the chromium browser. I would appreciate if someone could advice me how to do this.
To write the premaster secret we can ...
- 51
3
votes
1
answer
3k
views
Setting up a fake AP - problem with iptables and DNS server
Im trying to set up a fake AP using aircrack-ng suite, DHCP server & iptables.
After creating the fake AP:
airmon-ng start wlan1
airbase-ng -c 11 -e "freewifi" wlan1mon
running iptables ...
- 131
2
votes
3
answers
13k
views
Bettercap 2.x SSLStrip Is Not Breaking TLS (Without HSTS)
I have the latest version of bettercap. I have the latest version of Kali linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the lowest possible ...
- 163
2
votes
1
answer
2k
views
Redirect from HTTP to HTTPS; SSLStrip
Our web app home page redirects from HTTP to HTTPS. Our security consultant has told us this is a significant security weakness, that the redirect could be intercepted e.g. by SSLStrip. And therefore, ...
- 235
1
vote
2
answers
5k
views
SSLStrip vs HSTS
I've heard about the new SSLStrip and how it is able to bypass HSTS.
Where can I find an article that talks about this?
How does this work?
Where can I download it? Moxie's website has not been ...
- 135
1
vote
1
answer
625
views
SSL Strip Injection Point
I am reading up on SSL stripping and I have a fundamental question on the injection point that makes this MITM attack a success. I understand the typical scenario -
A (victim) <-- plain --> M (...
- 553
0
votes
2
answers
4k
views
SSLstrip is not working in the local network [duplicate]
My issue is the SSL stripping is not working in my LAN, but it works if I try to attack a HTTPS website with no HSTS. I am not using any domain name just the IP address of the server. Is there any ...
- 665