Results 1 to 3 of 3

Thread: SSlstrip? or not sslstrip?

  1. #1
    Senior Member
    Join Date
    Jan 2010
    Posts
    173

    Default SSlstrip? or not sslstrip?

    Hi all,
    Had so many probs with BT5 at the mo with sslstrip and ettercap among a few, so tried dns spoofing with a crafty weblogin trick.

    works all the time no trouble.

    Sslstrips strips the ssl and redirects it to http so why not just cut it out and redirect the target to to our webserver and grab the logins.



    Kind Regards dee
    Last edited by bolexxx; 03-16-2012 at 06:30 AM. Reason: no yt links

  2. #2
    Just burned his ISO silentplayer's Avatar
    Join Date
    Jan 2011
    Location
    Karachi, Pakistan
    Posts
    15

    Default Re: SSlstrip? or not sslstrip?

    pentest09

    Thanks for sharing. DNS Spoofing is not a new technique. SSLStrip & DNSSpoof can be use in different scenarios.

    Any one tried DroidSheep? Firesheep alternative for android phones.. Simple one click session hijacking app. Currently it supports Open/WEP encrypted networks.

    DroidSheep requires arpspoof,libcap on your android phones to run it. I have successfully sniff my facebook session which was logged in on my notebook through my Galaxy S phone. :-)

    You can read in detail here;
    http://www.hackersgarage.com/how-to-...id-phones.html

    It should be used for educational purpose to improve web security.

    SilentP

  3. #3
    Good friend of the forums
    Join Date
    Feb 2009
    Posts
    356

    Default Re: SSlstrip? or not sslstrip?

    pentest09, are you sharing this script? It seems worthy of testing out!

Similar Threads

  1. Parsing SSLStrip with definitions.sslstrip in easy-cred
    By ericmilam in forum BackTrack 5 Experts Section
    Replies: 3
    Last Post: 06-28-2011, 09:40 PM
  2. Parsing SSLStrip with definitions.sslstrip in easy-cred
    By ericmilam in forum BackTrack 5 Beginners Section
    Replies: 0
    Last Post: 05-31-2011, 08:39 PM
  3. sslstrip help
    By rogue040 in forum OLD BackTrack 4 Software Related Issues
    Replies: 0
    Last Post: 03-29-2010, 02:42 AM
  4. sslstrip v0.7
    By Mr-Protocol in forum Tool Requests
    Replies: 2
    Last Post: 01-18-2010, 06:33 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •