Questions tagged [sslstrip]
SSLstrip is an attack against mixed HTTP/HTTPS connection where a man-in-the-middle downgrades HTTPS links to HTTP.
110 questions
245
votes
14
answers
48k
views
My college is forcing me to install their SSL certificate. How to protect my privacy?
My college administration is forcing us to install Cyberoam Firewall SSL certificate so that they can view all the encrypted traffic to "improve our security". If I don't install the certificate than ...
- 2,171
106
votes
5
answers
149k
views
How does SSLstrip work?
I've been reading up on SSLstrip and I'm not 100% sure on my understanding of how it works.
A lot of documentation seems to indicate that it simply replaces occurrences of "https" with "http" in ...
- 3,248
34
votes
6
answers
35k
views
Can a secure cookie be set from an insecure HTTP connection? If so, why is it allowed?
With reference to some security paper I read, I found out that a cookie with the secure flag set can only be sent by the client over connections that are using HTTPS, not HTTP, but the cookie itself ...
- 541
26
votes
3
answers
8k
views
Bypassing HTTP to HTTPS cached 301 redirect to use SSLstrip
I'm doing some pen. tests on a HTTPS (443) server that does not have HSTS implemented (no HSTS headers on response and the address is not on Chrome HSTS preload list).
The problem is that in my ...
- 361
22
votes
2
answers
5k
views
Is there any point in having the HSTS header enabled when using HTTP/2?
As a protection against attacks such as SSLstrip, the HSTS header prevents an attacker from downgrading a connection from HTTPS to HTTP, as long as the attributes of the header are properly configured....
- 363
22
votes
4
answers
9k
views
Options when defending against SSLstrip?
I'm wondering, does anyone have any suggestions to defend against SSLstrip particularly?
- 321
18
votes
5
answers
11k
views
Is using "HTTPS everywhere" extension secure?
I would like to know if one should use 'HTTPS everywhere' extension? Is it secure to use it? Are there any better alternatives?
HTTPS Everywhere is a Firefox and Chrome extension that encrypts ...
- 283
17
votes
1
answer
11k
views
What is the difference between MITMproxy and SSLsplit?
I am aware that MITMproxy only captures HTTP/HTTPS protocols where SSLsplit is a transparent proxy and therefore can capture also other non-HTTP protocol communications. However MITMproxy can operate ...
- 669
16
votes
2
answers
7k
views
Is an HTTP 301 redirect to HTTPS, insecure?
For a website, I force a 301 redirect from http://login.example.com to https://login.example.com using a .htaccess file.
As I read in this question this still imposes a security threat. I'm wondering ...
- 163
15
votes
2
answers
15k
views
HSTS bypass with SSLstrip2 + DNS2proxy
I am trying to understand how to bypass HSTS protection. I've read about tools by LeonardoNve ( https://github.com/LeonardoNve/sslstrip2 and https://github.com/LeonardoNve/dns2proxy ).
But I quite don'...
- 253
13
votes
1
answer
364
views
How can mobile sign-on be secured from imposter authentication screens?
History seems to have come almost full circle where old issues are shown in new/emerging technologies.
Background
If you trust the operating system, Windows originally had the Control - Alt - Delete ...
- 51.1k
12
votes
2
answers
11k
views
How to thwart sslstrip attack?
I need help understanding the dynamics of an sslstrip attack. I'm using it to test the security of a site that I own. I can successfully sniff the victim (in this case, myself) credentials over the ...
- 1,557
12
votes
1
answer
14k
views
How does bypassing HSTS with SSLSTRIP+ work exactly?
I am doing research on bypassing HSTS. I read this guide on bypassing HSTS using SSLSTRIP+, but there are a few things that I don't understand.
First thing to do is to fire up MITMf in SSLstrip+ ...
- 327
10
votes
3
answers
11k
views
Does sslstrip work only on websites which use both HTTP and HTTPS?
Does sslstrip attack only work on websites which uses both HTTP and HTTPS? On Quora a commenter says that:
One thing to note is that, SSL Strip only works on websites which uses
both HTTP & ...
- 529
8
votes
4
answers
7k
views
Mitigating SSLStrip by only serving a site over HTTPS?
So I just learned about SSLStrip now--I feel like I'm so late to the game. What I want to know is: If your site only serves content over HTTPS and hard fails on HTTP requests, with no redirect, are ...
- 2,292
8
votes
2
answers
2k
views
Unable to downgrade https to http through sslstrip, arpspoof
I've been following this guide: https://www.cybrary.it/0p3n/using-sslstrip-in-kali-linux/
and others too, ex: official Sslstrip one: https://moxie.org/software/sslstrip/
without any success.
I'm ...
- 81
7
votes
2
answers
610
views
Is there an HSTS equivalent for DNSSec?
Is there any way to set a DNSSec-always policy similar to how HSTS commands Web Browsers to always use HTTPS?
This would mitigate a DNSSec-strip attack (similar to SSLStrip)
I'm also unclear if this ...
- 51.1k
6
votes
2
answers
2k
views
Can the network administrator of my university see what I have searched on Google?
Before you mark this one as a duplicate, I have indeed seen similar questions here but they do not provide the direct answer I'm seeking.
Here are a few details:
I've taken google as an example ...
- 61
6
votes
2
answers
3k
views
How to secure or (Ensuring Integrity) of Web Data in transit and in store?
Consider (usual scenario) You own a Shopping Cart Website and hosted on Internet, now, your hosting company provides you database to store your data.
If talking about security, we need it for:
...
- 1,377
6
votes
0
answers
648
views
Why are banks largely absent from the HSTS preload list?
There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
- 61
5
votes
1
answer
19k
views
Why is the deprecated SSL 2.0 protocol considered insecure and how can it be exploited?
I am making a presentation to the class about "SSL 2.0 deprecated protocol" and I really have no idea how this exploit is used or how the attacker can use this vul. I understand the impact of this vul,...
- 61
5
votes
2
answers
9k
views
Protecting against SSL Strip [duplicate]
I've read you can attack connections using tools like sslstrip, if you are on the same network. So what ensures that our SSL connections remain safe?
Does it depend on the cert strength?
Do you have ...
- 539
5
votes
1
answer
710
views
Ways to defeat SSL
I saw this video in which the guy talks about ways to defeat SSL. But the video is 4 years old. I wanted to know if these attacks are relevant even now, or some updates have been made to tackle these.
...
- 153
5
votes
3
answers
2k
views
Is a company website secure against sslstrip if it doesn't use ssl on homepage but ssl everywhere else?
Most ecommerce websites use SSL/TLS when you want to log. But most have homepage using http only. Is it enough to have SSL/TLS on login page and logged page to prevent sslstrip ?
- 1,403
4
votes
2
answers
401
views
Is it possible to retrieve data from a intermediate node in Tor browser
I'm using Tor browser for my internet surfing and check my email,
my questions are
Is my internet services provider able to see the websites I visited
Is it possible to retrieve a login information ...
- 175
4
votes
2
answers
446
views
SSLStrip still HTTPS
I did all the configuration right. IPtables, port forwarding, ARPspoof, everything.
However, in the browser websites like Facebook and Twitter are still HTTPS.
What am I doing wrong?
- 145
4
votes
2
answers
2k
views
SSL browser session keys
I am trying to export/write the SSL master secret and keys to a file from the chromium browser. I would appreciate if someone could advice me how to do this.
To write the premaster secret we can ...
- 51
4
votes
1
answer
2k
views
Man in the Middle Attack against NTP
So, lately I've been really into penetration testing and learning the nitty-gritty of tech. I'm dong courses on computer architecture, cryptography, surveillance law, and computer networks. I never ...
- 159
4
votes
3
answers
3k
views
SSLstrip attack on HTTPS request
Can an SSLstrip attack take place even if the client types https:// instead of http:// ?
I have read that an attacker can monitor for HTTP requests and redirect them to HTTPS. But I am curious to ...
- 349
4
votes
1
answer
3k
views
Why does sslstrip+ fail to intercept the traffic from websites like facebook and gmail?
I have been reading an article about sslstrip and mitm. Before the introduction of HSTS it was possible to strip ssl and send an insecure http page to the victim. Anyway it was overcome by using HSTS ...
4
votes
1
answer
2k
views
SSLStrip2 and HSTS
I have a question concerning the usage of SSLstrip2 to bypass HSTS on websites.
I managed to successfully install and deploy SSLStrip2 (in combination with DNS2Proxy). This means that when using a ...
- 183
4
votes
1
answer
751
views
SSL Strip on Fedora24
I want to perform a MITM attack on my own network, and followed several tutorials on how to use sslstrip, iptables and arpspoof.
But every time I perform the attack, I lose the connection on the ...
- 41
3
votes
1
answer
576
views
Does HSTS make using a public WiFi safe?
What attacks, if any, are possible if I connect to a public WiFi network and only use my computer to access a previously-visited site that uses HSTS. I believe that attacks such as SSLstrip are not ...
- 14.9k
3
votes
1
answer
5k
views
How Chrome avoids sslstrip?
I'm trying out Moxie's sslstrip tool in my pentester lab. It works in all my VM's but no in all browsers. Firefox and IE are vulnerable but Chrome seems to has a protection against.
Anyone know how ...
user15194
3
votes
2
answers
1k
views
Is this possible with SSLsplit?
SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs forged X509v3 certificates on-the-fly, based on ...
- 121
3
votes
2
answers
4k
views
How to intercepting iOS HTTPS traffic
How can I intercept & parse through the SSL traffic (incoming & outgoing) generated by my iPad application?
- 1,809
3
votes
2
answers
3k
views
SSL stripping in home network
I am trying to monitor the traffic of some "smart devices" in my home (TV, coffee machine, ...) but most of them communicate over SSL.
What possibilities are there to look into SSL encrypted ...
- 171
3
votes
1
answer
718
views
Can HTTPS-Everywhere Prevent An SSL-Stripping Attack?
If I set HTTPS-Everywhere to block all unencrypted requests, and my connection is man-in-the-middled by a malicious Tor exit node when I connect to a website that, by default, uses HTTPS, then will ...
- 155
3
votes
1
answer
3k
views
Setting up a fake AP - problem with iptables and DNS server
Im trying to set up a fake AP using aircrack-ng suite, DHCP server & iptables.
After creating the fake AP:
airmon-ng start wlan1
airbase-ng -c 11 -e "freewifi" wlan1mon
running iptables ...
- 131
3
votes
0
answers
310
views
Experimenting with SSLStrip+ on the same machine
I am trying to play around to understand how SSLStrip+ works by:
$ cat /proc/sys/net/ipv4/ip_forward
1
$ sudo iptables --flush
$ sudo iptables --flush -t nat
$ sudo iptables -t nat -A PREROUTING -p ...
- 153
2
votes
2
answers
528
views
Can enforcing a website to serve SSL requests only prevent SSLstrip from working?
I understand running a website with HSTS can help prevent an attacker using KRACK to downgrade the website to serve HTTP requests.
What if our web server does not support HSTS?
IIS has a setting ...
- 503
2
votes
3
answers
14k
views
Bettercap 2.x SSLStrip Is Not Breaking TLS (Without HSTS)
I have the latest version of bettercap. I have the latest version of Kali linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the lowest possible ...
- 163
2
votes
1
answer
2k
views
Redirect from HTTP to HTTPS; SSLStrip
Our web app home page redirects from HTTP to HTTPS. Our security consultant has told us this is a significant security weakness, that the redirect could be intercepted e.g. by SSLStrip. And therefore, ...
- 235
2
votes
3
answers
360
views
Would MITM be able to manipulate the X-Frame-Option
I was wondering if the following scenario was realistically achievable.
We have a Network with a Computer that is used by Bob. He is security conscious person and uses a password manager. His ...
- 1,027
2
votes
1
answer
184
views
After performing a SSL strip, can you upgrade back to HTTPS with your own encryption from the proxy?
Let's say you are performing a SSL strip. From what I can understand, it modifies either the client or server packets (in the http/https protocol), which indicate that it supports encryption to not ...
- 23
2
votes
1
answer
723
views
Is it possible to modify SSLStrip such that the client has an HTTPS connection?
I've only seen examples of this type of MITM attack stripping SSL completely and this isn't ideal as most devices warn their users when the connection is not secured.
So is it possible to create the ...
- 23
2
votes
1
answer
2k
views
Can cascaded routers protect inner network's machine from attacker from outer network?
Given:
Outer Network
router A
wan ip 209.123.12.11
address 10.10.0.1
machine A
address 10.10.0.10
gateway 10.10.0.1
Inner Network
router B
wan ip 10.10.0.100
address 192.168.10.1
machine B
...
- 329
2
votes
2
answers
664
views
Is https safe enough as of now?
Because of my job I keep traveling around Europe, which means I keep connecting to all kinds of public wireless.
In principle I could use a VPN and that should be always safe (is this statement right?...
- 23
2
votes
1
answer
2k
views
sslstrip gives error "exceptions.AttributeError: 'int' object has no attribute 'splitlines'" when used with ettercap [closed]
I have 3 VM's running in VirtualBox. All 3 VM's are connected to a virtual network created from VirtualBox with the IP 192.168.56.1/24
For all VM's are configured Host only Adapter
1 Linux web ...
- 143
2
votes
1
answer
9k
views
sslstrip not working in LAN
I have a LAN with 3 machines connected to a switch. Two machines run Ubuntu 15.04, one with Apache SSL installed which works as the webserver. Another machine also running Ubuntu serves as the client. ...
- 173