3

According to the documentation, this works by rewriting HTTPS links to HTTP links with a different subdomain. Since none of these sites use the includeSubDomains directive, the browser won't use HSTS for these rewritten links. Using the includeSubDomains directive prevents this attack by having browsers force the use of HTTPS for all subdomains of a site, ...


1

Yes, Bettercap can show you all the wireless Access Points in range. The reason why you didn't see all of them (or any) depends largely on your hardware and on your exact configuration. What is Monitor Mode? When you put your wireless card into monitor mode, you tell it to forward every packet that it receives to the operating system and to any ...


1

How about reading changelog or help menu: 02.04.2019 ========== Due to hashcat changes: "WPA/WPA2 cracking: In the potfile, replace password with PMK in order to detect already cracked networks across all WPA modes" https://github.com/hashcat/hashcat/commit/b8d609ba1604f4fed62198ae5000e205dcc87f70 hcxpcaptool: added new option -k to convert dumpfile to new ...


1

Try using the same tools and strategy but with one modification. Before you do all that first try to setup a fake hotspot. You will need additional wireless adapter which supports monitor mode. No matter if you use framework or you setup hotspot manually. I think that SSLStrip is much more effective when all the traffic are literally flying trough you. You ...


1

after a lot of searching I just found out that Bettercap 2.x apparently just does not do the HSTS bypass thing. The sslstrip from the http.proxy module works just fine, I've tested it on my network, all the HTTPS website where now HTTP, however Chrome, Firefox and so on block them cause you visited them once with HTTPS, some website are still visitable by ...


1

SSLStrip converts HTTPS to HTTP Not exactly; you cannot "convert HTTPS to HTTP" once a SSL/TLS connection has been established (unless the server sends the client such a redirect, but you cannot impersonate the server without its private key). It only does this in the sense that URLs are rewritten from https:// to http://. SSLStrip will work ...


1

You will have to ask yourself how bettercap can get a hold of traffic. You mention three distinct machines in your scenario: User IP: 192.168.1.5/24, G/w 192.168.1.1 Proxy Server IP: 172.27.0.50 Kali Linux (running bettercap): 192.168.1.10/24, G/w 192.168.1.1 But in order to better understand what's going on, you need to clear that there is ...


1

Is it possible that your ethernet port isn't yielding anything? Try it with another interface e.g. wlan0 to see if that yields anything. A suggestion: I think you're using the legacy version of bettercap. There's a new version (https://www.bettercap.org/) that takes less space, is more reliable, and faster - according to the website. If you got bettercap ...


1

Bettercap tool using HSTS technique to bypass https sites, and this type of attack work only for sites not listed on the preloaded list. You can check the list here. If you are trying to sniff the traffic of facebook or google apps( such as Gmail, Instagram,...) it's didn't work, even if the client uses the application or the browser, because of the ...


1

Finally they solved the problem. It was a bug on bettercap's side: https://github.com/evilsocket/bettercap/issues/356


Only top voted, non community-wiki answers of a minimum length are eligible