Hot answers tagged

3

For sites like google and facebook several browser have preloaded HSTS (enforce HTTPS) and HPKP (certificate/public key pinning) settings. This means that the browser knows that these sites should be reachable by https only and how the certificate should look like. And this means that stripping SSL and the HSTS header (i.e. your --hsts option) will not work ...


2

You could MITM the victim’s DNS connection. When the victim requests a name resolution for a.com, you return the address for b.com. The victim’s browser bar will still say a.com, but they will be communicating with b.com. Or you could MITM the http stream and let the victim connect to a.com, but replace the server’s 200 response with a 302 redirect ...


1

PLease check this issue: https://github.com/byt3bl33d3r/MITMf/issues/280 MITMF use BDProxy to patch files, but it only works with non-ssl connections. Can you check if you are trying to download a file via HTTPS? Check documentation for more information: https://github.com/secretsquirrel/BDFProxy.


1

Interesting question. If i understand correctly: fake.php is the frontend to login.php on the main server, and you are spoofing both. If i am, then: I would record the user's internal IP, and credentials, then store it. if the ip that visits login has been there before, forward the data to the real server. If the password is correct (check using some ...


1

It can not, a transparent proxy is more or less a language abuse, it is transparent to the end user because it doesn't require configuration on the end user part (the workstation just does normal requests). For a proxy to work it has to intercept the flow, it will end the workstation flow and make the request on behalf of the client. The source address will ...


1

Based on the answers of this question, the answer is a matter of two principles: The proxy configuration. you can set the proxy not to edit headers, especially the fields such as X-Forwarded-For and X-Client-IP. Client modifications. Many transparent proxies will allow SSL traffic to pass by without proxying, since proxying an SSL connection requires ...


Only top voted, non community-wiki answers of a minimum length are eligible