SSLStrip - Revision history

Admin: Major expansion: added attack theory, HSTS limitations, SSLStrip+ bypass techniques, full attack walkthrough with ARP spoofing, defenses/countermeasures, related tools, and cleaned up legacy commented-out content. (via update-page on MediaWiki MCP Server)

2026-06-19T05:49:43Z

Major expansion: added attack theory, HSTS limitations, SSLStrip+ bypass techniques, full attack walkthrough with ARP spoofing, defenses/countermeasures, related tools, and cleaned up legacy commented-out content. (via update-page on MediaWiki MCP Server)

Show changes

Admin: /* Flags */

2017-10-25T22:17:26Z

Flags

← Older revision		Revision as of 22:17, 25 October 2017
Line 68:		Line 68:

	=Flags=		=Flags=



	{{MITMFlag}}		{{MITMFlag}}
Line 78:		Line 76:

	<!--		<!--




	SSLStrip is a tool for forcing users to use HTTP traffic.		SSLStrip is a tool for forcing users to use HTTP traffic.
Line 90:		Line 91:

	http://area51archives.com/		http://area51archives.com/



Line 97:		Line 97:

	NOT CURRENTLY WORKING.		NOT CURRENTLY WORKING.

	~~SSLStrip is a way of conducting a man in the middle attack such that the user inserts themselves between the sheep and the server for SSL sessions.~~

	Implements Moxie Marlinspike's HTTPS attacks. https://pypi.python.org/pypi/sslstrip		Implements Moxie Marlinspike's HTTPS attacks. https://pypi.python.org/pypi/sslstrip
Line 133:		Line 131:
	$ sslstrip.py -l 6666		$ sslstrip.py -l 6666
	</pre>		</pre>








	-->		-->

Admin: /* Overview */

2017-10-25T22:10:07Z

Overview

← Older revision		Revision as of 22:10, 25 October 2017
Line 4:		Line 4:

	=Overview=		=Overview=

			==Source Code==

			Github: https://github.com/moxie0/sslstrip

			Moxie's page: https://moxie.org/software/sslstrip/

	==Installing==		==Installing==
Line 29:		Line 35:
	Important tags:		Important tags:

			<pre>
	-w - specifies log file		-w - specifies log file

Line 36:		Line 43:

	-l port - port to listen on		-l port - port to listen on
			</pre>

	==Basic Usage==		==Basic Usage==
Line 46:		Line 54:

	Now any HTTPS connections made to it are turned into HTTP connections, and their encryption layer stripped. SSLStrip also keeps track of which requests have been stripped, so that when the HTTP response from the sheep is received, it is forwarded along to the server as an HTTPS response.		Now any HTTPS connections made to it are turned into HTTP connections, and their encryption layer stripped. SSLStrip also keeps track of which requests have been stripped, so that when the HTTP response from the sheep is received, it is forwarded along to the server as an HTTPS response.

			Also make sure your machine forwards packets it receives:

			<pre>
			$ echo "1" > /proc/sys/net/ipv4/ip_forward
			</pre>

	Now run sslstrip:		Now run sslstrip:

Admin: /* Installing */

2017-10-25T22:08:39Z

Installing

← Older revision		Revision as of 22:08, 25 October 2017
Line 6:		Line 6:

	==Installing==		==Installing==

			On Kali:

	<pre>		<pre>
	$ apt-get install sslstrip		$ apt-get install sslstrip
			</pre>

			On other:

			<pre>
			$ git clone https://github.com/moxie0/sslstrip.git
			$ cd sslstrip
			$ python setup.py build && python setup.py install
	</pre>		</pre>

Admin at 06:24, 22 August 2016

2016-08-22T06:24:44Z

← Older revision		Revision as of 06:24, 22 August 2016
Line 1:		Line 1:
	A tool from Moxie Marlinspike		A tool from Moxie Marlinspike

			Also see [[SSLSniff]]

	=Overview=		=Overview=

Admin at 06:24, 22 August 2016

2016-08-22T06:24:29Z

← Older revision		Revision as of 06:24, 22 August 2016
Line 1:		Line 1:
			A tool from Moxie Marlinspike

	=Overview=		=Overview=

Admin: /* Basic Usage */

2016-08-22T06:24:06Z

Basic Usage

← Older revision		Revision as of 06:24, 22 August 2016
Line 36:		Line 36:

	<pre>		<pre>
	$ sslstrip~~.py~~ -l 6666		$ sslstrip -l 6666
	</pre>		</pre>

Admin at 05:48, 22 August 2016

2016-08-22T05:48:47Z

@@ Line 1: / Line 1: @@
 SSLStrip is a tool for forcing users to use HTTP traffic.
@@ Line 11: / Line 63: @@
 http://area51archives.com/
-<!--
   is a way of conducting a man in the middle attack such that the user inserts themselves between the sheep and the server for SSL sessions.
@@ Line 61: / Line 114: @@
 -->

Admin at 17:56, 30 August 2015

2015-08-30T17:56:00Z

← Older revision		Revision as of 17:56, 30 August 2015
Line 8:		Line 8:

	http://area51archives.com/index.php?title=Setting_Up_a_Wifi_Access_Point_and_Dealing_With_SSL		http://area51archives.com/index.php?title=Setting_Up_a_Wifi_Access_Point_and_Dealing_With_SSL

			http://area51archives.com/

	<!--		<!--

Admin at 17:55, 30 August 2015

2015-08-30T17:55:23Z

← Older revision		Revision as of 17:55, 30 August 2015
Line 6:		Line 6:

	https://www.exploit-db.com/docs/11114.pdf		https://www.exploit-db.com/docs/11114.pdf

			http://area51archives.com/index.php?title=Setting_Up_a_Wifi_Access_Point_and_Dealing_With_SSL

	<!--		<!--