Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

SSL-STRIP - TUTORIAL

Hi Guys,

I just want to share this video on SSL-Strip that I found to be very easy to follow and understand.

The presenter on this video did a great job at explaining what SSL-Strip is and how to put it into practice.

I think this video will be of a great assistance for some users.

http://www.securitytube.net/video/193

Disclaimer:

Please note, this is NOT my video and I give full credits to the Author.

Enjoy it.
--added to the sticky thread 26/2/2013--

* a valuable source of information.
Try Harder...

Quote (Click to View)
Greyhat.Infiltrator Wrote:  Hi Guys,

I just want to share this video on SSL-Strip that I found to be very easy to follow and understand.

The presenter on this video did a great job at explaining what SSL-Strip is and how to put it into practice.

I think this video will be of a great assistance for some users.





Disclaimer:

Please note, this is NOT my video and I give full credits to the Author.

Enjoy it.


I had trouble seeing the video or link, on HF, with different browser's.
Here's the link for anyone else experiencing the same issues.


http://www.securitytube.net/video/193
@Thanks PandaSec for adding it to the Stickie, and I did mention it wasn't mine.
@Thanks Rafe_D for providing the link, MyBBForum doesn't support the video player format I was trying to upload. That's why you couldn't watch on any of the web browsers.
Gotta love securitytube. Thanks for the share man.
??
Yea Pink, Security Tube is awesome. I like Vivek's videos very much.
I do have a question though. For people being attacked wouldn't it cause for some alarm that the expected https address shows instead http? I have run this before on my own pc's and router but never noticed the s missing! I was raised on Windows and was always told to look for the "lock". Maybe by not noticing I answered my own question. 😊
(Feb 26, 2013 11:15 AM)DBlue Wrote:  Yea Pink, Security Tube is awesome. I like Vivek's videos very much.
I do have a question though. For people being attacked wouldn't it cause for some alarm that the expected https address shows instead http? I have run this before on my own pc's and router but never noticed the s missing! I was raised on Windows and was always told to look for the "lock". Maybe by not noticing I answered my own question. 😊

Not so much that, but your browser could also send a warning message about the certificate being invalid. Which in that video, that didn't happen, but I have seen that happening before.
Its Vivek Ramachandran. Founder of Securitytube.net
(Mar 15, 2013 01:01 AM)sauron321 Wrote:  Its Vivek Ramachandran. Founder of Securitytube.net

Yep he is the founder.

http://www.promediakw.com/2012/infosec/i...et&catid=2
Awesome video I was just about to post something similar until I found this thread.

The link if anyone is curious.
http://www.thoughtcrime.org/software/sslstrip/
Gotta love it...Thanks for the share bro.
thanks this is awesome! it is so hard to find good tutorials on this topic. I cant wait to work through it
(Aug 19, 2023 02:26 AM)powerofmiracles Wrote:  thanks this is awesome! it is so hard to find good tutorials on this topic. I cant wait to work through it

Had to click on the link to see how old it was. Might want to avoid tutorials from 2011. Now I'm no expert on IPtables, but it looked like he was saying to route inbound traffic on port 80 to SSLstrip. I must not be reading that right. No one would try to strip SSL from HTTP. Anyway, it's a good DoS method for ~26% of websites.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by GodofdeathftwMay 31, 2019 05:06 PM 4 221 May 31, 2019 05:06 PM
Last Post: Godofdeathftw
by KruegerMar 15, 2018 12:58 PM 0 235 Mar 15, 2018 12:58 PM
Last Post: Krueger
by shvm0396Oct 14, 2016 03:48 AM 8 406 Oct 14, 2016 03:48 AM
Last Post: azag