+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Wifi 5G WPA WEP Bluetooth Wireless Hacking (https://hackforums.net/forumdisplay.php?fid=104)
+---- Thread: SSL-STRIP - TUTORIAL (/showthread.php?tid=3286915)
SSL-STRIP - TUTORIAL - TheGrayAviator - Feb 26, 2013
Hi Guys,
I just want to share this video on SSL-Strip that I found to be very easy to follow and understand.
The presenter on this video did a great job at explaining what SSL-Strip is and how to put it into practice.
I think this video will be of a great assistance for some users.
http://www.securitytube.net/video/193
Disclaimer:
Please note, this is NOT my video and I give full credits to the Author.
Enjoy it.
* - HackRain - Feb 26, 2013
--added to the sticky thread 26/2/2013--
* a valuable source of information.
* a valuable source of information.
* - Rafe_D - Feb 26, 2013
Quote (Click to View)
Greyhat.Infiltrator Wrote: Hi Guys,
I just want to share this video on SSL-Strip that I found to be very easy to follow and understand.
The presenter on this video did a great job at explaining what SSL-Strip is and how to put it into practice.
I think this video will be of a great assistance for some users.
Disclaimer:
Please note, this is NOT my video and I give full credits to the Author.
Enjoy it.
I had trouble seeing the video or link, on HF, with different browser's.
Here's the link for anyone else experiencing the same issues.
http://www.securitytube.net/video/193
* - TheGrayAviator - Feb 26, 2013
@Thanks PandaSec for adding it to the Stickie, and I did mention it wasn't mine.
@Thanks Rafe_D for providing the link, MyBBForum doesn't support the video player format I was trying to upload. That's why you couldn't watch on any of the web browsers.
* - PinkPanther - Feb 26, 2013
Gotta love securitytube. Thanks for the share man.
* - DBlue - Feb 26, 2013
Yea Pink, Security Tube is awesome. I like Vivek's videos very much.
I do have a question though. For people being attacked wouldn't it cause for some alarm that the expected https address shows instead http? I have run this before on my own pc's and router but never noticed the s missing! I was raised on Windows and was always told to look for the "lock". Maybe by not noticing I answered my own question. 😊
* - TheGrayAviator - Feb 26, 2013
(Feb 26, 2013 11:15 AM)DBlue Wrote: Yea Pink, Security Tube is awesome. I like Vivek's videos very much.
I do have a question though. For people being attacked wouldn't it cause for some alarm that the expected https address shows instead http? I have run this before on my own pc's and router but never noticed the s missing! I was raised on Windows and was always told to look for the "lock". Maybe by not noticing I answered my own question. 😊
Not so much that, but your browser could also send a warning message about the certificate being invalid. Which in that video, that didn't happen, but I have seen that happening before.
* - sauron321 - Mar 15, 2013
Its Vivek Ramachandran. Founder of Securitytube.net
* - TheGrayAviator - Mar 15, 2013
(Mar 15, 2013 01:01 AM)r.s.mahanti Wrote: Its Vivek Ramachandran. Founder of Securitytube.net
Yep he is the founder.
http://www.promediakw.com/2012/infosec/index.php?option=com_content&view=article&id=53:Mr-Vivek-Ramachandran,-Founder-and-Chief-Trainer,-SecurityTube-net&catid=2
* - SoMuchMudkip - May 25, 2013
Awesome video I was just about to post something similar until I found this thread.
The link if anyone is curious.
http://www.thoughtcrime.org/software/sslstrip/
* - Habraam - Sep 22, 2013
Gotta love it...Thanks for the share bro.
RE: SSL-STRIP - TUTORIAL - powerofmiracles - Aug 19, 2023
thanks this is awesome! it is so hard to find good tutorials on this topic. I cant wait to work through it
RE: SSL-STRIP - TUTORIAL - DramaKing - Aug 19, 2023
(Aug 19, 2023 02:26 AM)powerofmiracles Wrote: thanks this is awesome! it is so hard to find good tutorials on this topic. I cant wait to work through it
Had to click on the link to see how old it was. Might want to avoid tutorials from 2011. Now I'm no expert on IPtables, but it looked like he was saying to route inbound traffic on port 80 to SSLstrip. I must not be reading that right. No one would try to strip SSL from HTTP. Anyway, it's a good DoS method for ~26% of websites.