|
|
Post by xtr4nge on Aug 8, 2015 8:59:35 GMT
--
|
|
bread
New Member
Posts: 3
|
Post by bread on Oct 22, 2015 1:42:45 GMT
Other than this module what else is required to get this working?
im running pwnpi 4.1.7 (apparently) with fruitywifi 2.2.
i have MITMf as well but i cant seem to get sslstrip+ working ether.
|
|
|
|
Post by xtr4nge on Oct 23, 2015 13:44:05 GMT
Hi bread,
MITMf already uses a build in SSLstrip+ version, so you can't run MITMf module and SSLstrip2 module together.
Also, please notice that SSLstrip+/2 is not bulletproof, and only works under very specific scenarios, browsers and websites.
regards,
|
|
bread
New Member
Posts: 3
|
Post by bread on Oct 28, 2015 3:17:11 GMT
thanks i moved over to MITMf module as the injection/replace functions are handy.
|
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Mar 13, 2016 2:15:06 GMT
I cannot get SSLStrip2 to work. It redirects http://www.*.* to wwww.*.* (note the 4th w) which, by searching on the web, is "normal" behavior to try to bypass HSTS on websites that have it. However, on the "About" page it says you need to do a DNS change (so the wwww is actually pointed to the www's IP). However, that is not working for me, I get correctly redirected to wwww but then it fails. Also, SSLStrip on FruityProxy (which is SSLStrip+) is not working for me either, so I'm out of luck with SSLStrip. I haven't found anything similar on MITMf, only on FruityProxy. I have only got SSLstrip (1) to work, but would like to get SSLstrip+ / 2 either with MITMf, FruityProxy or as a standalone module, I do not really mind Any ideas? Any help appreciated  Thanks! |
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Mar 18, 2016 23:47:50 GMT
I cannot get SSLStrip2 to work. It redirects http://www.*.* to wwww.*.* (note the 4th w) which, by searching on the web, is "normal" behavior to try to bypass HSTS on websites that have it. However, on the "About" page it says you need to do a DNS change (so the wwww is actually pointed to the www's IP). However, that is not working for me, I get correctly redirected to wwww but then it fails. Also, SSLStrip on FruityProxy (which is SSLStrip+) is not working for me either, so I'm out of luck with SSLStrip. I haven't found anything similar on MITMf, only on FruityProxy. I have only got SSLstrip (1) to work, but would like to get SSLstrip+ / 2 either with MITMf, FruityProxy or as a standalone module, I do not really mind Any ideas? Any help appreciated Thanks! Ok! So I got SSLStrip (1) to work. Still cannot get SSLStrip2, how do you set the reverse DNS proxy? Thanks  |
|
