Results 1 to 2 of 2

Thread: sslstrip and firefox-warning

Hybrid View

  1. #1
    Just burned their ISO
    Join Date
    Mar 2009
    Posts
    20

    Default sslstrip and firefox-warning

    Hey there fellow backtrackers and pentesters,

    after months of in-depth metasploit-juggling and learning about stuff like .exe-injections, encryptions, etc., I recently went on to learn more about wifi-network(ing) attacks like MITM, ARP-spoofing and so on.

    Long story short: When running sslstrip 0.9 (BT5R3) during a MITM-attack my current victim-machine (Win7, not patched, no AV, firewall opened for web, network-printers, etc.) constantly alerts that someone may be faking the desired website (i.e. gmail, fb, and others) and asks me to actively add an exception for this insecure protocol. Real bummer in a pentest.

    Is there any way to prevent firefox from detecting sslstrip's work and passing me to the desired site without asking for a permisson / exception?

    Thanks in advance,

    Carns

  2. #2
    Junior Member rastamouse's Avatar
    Join Date
    Oct 2012
    Posts
    32

    Default Re: sslstrip and firefox-warning

    This is the default behavior of the browser, to alert users' to potential naughtiness that is occurring. Not sure if there is a setting in the GUI to turn it off, but you may find it if you type about:config into the address bar. That's just a guess though.

Similar Threads

  1. sslstrip does nothing
    By ocdocdocd in forum BackTrack 5 Beginners Section
    Replies: 17
    Last Post: 03-13-2012, 08:15 AM
  2. Parsing SSLStrip with definitions.sslstrip in easy-cred
    By ericmilam in forum BackTrack 5 Experts Section
    Replies: 3
    Last Post: 06-28-2011, 09:40 PM
  3. Parsing SSLStrip with definitions.sslstrip in easy-cred
    By ericmilam in forum BackTrack 5 Beginners Section
    Replies: 0
    Last Post: 05-31-2011, 08:39 PM
  4. Firefox 3.5.7
    By SignusX7 in forum Tool Requests
    Replies: 5
    Last Post: 01-29-2010, 07:24 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •