Page 6 of 8 FirstFirst ... 45678 LastLast
Results 51 to 60 of 79

Thread: [Video] How to: Snifff SSL / HTTPS (sslstrip)

  1. #51
    Moderator g0tmi1k's Avatar
    Join Date
    Feb 2010
    Posts
    1,771

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    Yeah, Ive found this too.
    What command lines did you use?
    I can remember manually editing a file at one stage to fix this...
    Have you...g0tmi1k?

  2. #52
    Just burned his ISO
    Join Date
    Sep 2010
    Posts
    12

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    Total n00b question here, but to clarify, you need to be on the same network as the victim computer, correct? So, being on the same WiFi network would suffice?

    Cheers,
    - Sulegna -

  3. #53
    Just burned his ISO
    Join Date
    Jun 2010
    Posts
    9

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    Quote Originally Posted by g0tmi1k View Post
    Yeah, Ive found this too.
    What command lines did you use?
    I can remember manually editing a file at one stage to fix this...
    Thanks god im not the only one seen it atleast.
    I tryed to reproduce that error and sometimes is there sometimes not.

    First when i used:
    sslstrip -a -k -f -l 10000
    ettercap -i wlan0 -T -q

    I got the erroer, then i removed all settings from sslstrip and added one after an other but when i ended up with that same line at last it didnt show.... So i dont know if it ettercap or sslstrip or what cause it.


    Total n00b question here, but to clarify, you need to be on the same network as the victim computer, correct? So, being on the same WiFi network would suffice?

    Cheers,
    - Sulegna -
    Yes, wireless is network just an other medium for the bits to travel on.

  4. #54
    Junior Member Tr00g33k's Avatar
    Join Date
    Jul 2008
    Posts
    46

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    g0tm1lk thanks for the tut. It`s really great.

    I use ettercap, and evrything works just fine, but after some time ettercap doesnt show me any logins anymore. When i cancel the ettercap then i get message:
    Perhaps iptables or your kernel needs to be upgraded.
    iptables v1.4.0: can`t initialize iptables table `net`: Permission denied (you must be root)

    But for few minutes evrything wokrs fine, but after some time ettercap running, i dont get any logins anymore, i close it, and then i get this message.
    *I`m loged on as root

    Any idea ?

    Tr00G33k

  5. #55
    Moderator g0tmi1k's Avatar
    Join Date
    Feb 2010
    Posts
    1,771

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    Quote Originally Posted by Sulegna View Post
    Total n00b question here, but to clarify, you need to be on the same network as the victim computer, correct? So, being on the same WiFi network would suffice?

    Cheers,
    - Sulegna -
    Yeah & Yeah.
    You have to be on the same local network because of the style of attack (Man-In-The-Middle via ARP).
    You can do this attack on WiFi too.


    Quote Originally Posted by zlate View Post
    Thanks god im not the only one seen it atleast.
    I tryed to reproduce that error and sometimes is there sometimes not.

    First when i used:
    sslstrip -a -k -f -l 10000
    ettercap -i wlan0 -T -q

    I got the erroer, then i removed all settings from sslstrip and added one after an other but when i ended up with that same line at last it didnt show.... So i dont know if it ettercap or sslstrip or what cause it.

    Yes, wireless is network just an other medium for the bits to travel on.
    Its SSLStrip. The way I found was to edit a file and recompile it.

    Quote Originally Posted by Tr00g33k View Post
    g0tm1lk thanks for the tut. It`s really great.

    I use ettercap, and evrything works just fine, but after some time ettercap doesnt show me any logins anymore. When i cancel the ettercap then i get message:
    Perhaps iptables or your kernel needs to be upgraded.
    iptables v1.4.0: can`t initialize iptables table `net`: Permission denied (you must be root)

    But for few minutes evrything wokrs fine, but after some time ettercap running, i dont get any logins anymore, i close it, and then i get this message.
    *I`m loged on as root

    Any idea ?

    Tr00G33k
    Quote Originally Posted by khianhui View Post
    Try to change UID and GID to 0 in the etter.conf since you enable the iptable in the etter.conf
    Try editing the [privs] in /etc/etter.conf
    Code:
    ec_uid = 0
    Have you...g0tmi1k?

  6. #56
    Junior Member Tr00g33k's Avatar
    Join Date
    Jul 2008
    Posts
    46

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    I tried what you suggested me, for now its working, i will be testing it for a while and let you know.
    Thnx, Tr00G33k

  7. #57
    Junior Member Tr00g33k's Avatar
    Join Date
    Jul 2008
    Posts
    46

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    Too quick answer :S Again the same error:
    Perhaps iptables or your kernel needs to be upgraded.
    iptables v1.4.0: can`t initialize iptables table `net`: Permission denied (you must be root)

    I can scan network for password just for few minutes and then i dont recieve any more logins :S I changed
    etter.conf : ec_uid = 0, but it happens the same. Any other idea?

    Tr00G33k

  8. #58
    Moderator g0tmi1k's Avatar
    Join Date
    Feb 2010
    Posts
    1,771

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    Quote Originally Posted by Tr00g33k View Post
    Too quick answer :S Again the same error:
    Perhaps iptables or your kernel needs to be upgraded.
    iptables v1.4.0: can`t initialize iptables table `net`: Permission denied (you must be root)

    I can scan network for password just for few minutes and then i dont recieve any more logins :S I changed
    etter.conf : ec_uid = 0, but it happens the same. Any other idea?

    Tr00G33k
    Try doing ec_gidas well as ec_uid (both to 0).
    What version of backtrack are you using?
    What kernel version have you got?
    Try
    Code:
    cat /proc/sys/net/ipv4/ip_forward
    Before running, when its working, when you got the error, after ettercap, is the value always 1?
    Have you got anything else running?
    Have you...g0tmi1k?

  9. #59
    Junior Member
    Join Date
    Aug 2010
    Posts
    48

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    I finally have gotten this to work on my test network

    The network is both wifi and ethernet. I am lucky I have a real-time network to test this on, but it is causing havoc for my relatives server.

    The first thing to go down is the email server.

    In this particular case 192.168.0.1 is the routers IP however 192.168.0.5 is requiered instead, as that is the default gateway that has been set. I attempted to use the email server on the target PC, but his email server crashed out, and MYOB server. It made me laugh to see my Dad jumping around like a monkey, rofl.

    But anyway, I was wondering why this is the case. Any thoughts?

  10. #60
    Moderator g0tmi1k's Avatar
    Join Date
    Feb 2010
    Posts
    1,771

    Default Re: [Video] How to: Snifff SSL / HTTPS (sslstrip)

    Quote Originally Posted by RexBudman View Post
    I finally have gotten this to work on my test network

    The network is both wifi and ethernet. I am lucky I have a real-time network to test this on, but it is causing havoc for my relatives server.

    The first thing to go down is the email server.

    In this particular case 192.168.0.1 is the routers IP however 192.168.0.5 is requiered instead, as that is the default gateway that has been set. I attempted to use the email server on the target PC, but his email server crashed out, and MYOB server. It made me laugh to see my Dad jumping around like a monkey, rofl.

    But anyway, I was wondering why this is the case. Any thoughts?
    How many targets are you doing at once!?
    My guess is that a "bottle neck" of traffic is happening. When your doing the attack, all the traffic has to "flow" though your box...and too much for it to handle.
    Have you...g0tmi1k?

Page 6 of 8 FirstFirst ... 45678 LastLast

Similar Threads

  1. Sickness - Password Sniffing with SSLStrip.
    By sickness in forum BackTrack Videos
    Replies: 35
    Last Post: 09-17-2010, 01:16 PM
  2. creating BT4 USB persistent video
    By jimmy in forum Beginners Forum
    Replies: 0
    Last Post: 02-12-2010, 11:45 PM
  3. sslstrip w/ My Wired-Wireless Network
    By MassAppeal in forum Beginners Forum
    Replies: 11
    Last Post: 02-11-2010, 05:56 AM
  4. Video Capture Software
    By sprouty in forum Beginners Forum
    Replies: 4
    Last Post: 01-25-2010, 11:16 AM
  5. sslstrip v0.7
    By Mr-Protocol in forum Tool Requests
    Replies: 2
    Last Post: 01-18-2010, 06:33 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •