sillymell0n Posted July 25, 2015 Share Posted July 25, 2015 Hello World. N00b here. So, after playing with my Pineapple, and learning how it works.... getting people connected and things, it seems that anything interesting is just not possible with SSL and HTTPS. What am I missing? I just see a lot of encrypted junk in SSLstrip or Wireshark. Please point me in the correct direction? Thanks Quote Link to comment Share on other sites More sharing options...
Sildaekar Posted July 26, 2015 Share Posted July 26, 2015 This has been discussed many times, please search these forums or google for hsts Quote Link to comment Share on other sites More sharing options...
cooper Posted July 26, 2015 Share Posted July 26, 2015 And I'll just leave this here for you to think about. With the typical caveat with much-used software - news of bugs in it travels *fast* so mitigations are put in place and fixes applied at an equal rate. In other words, your target has to be slow, dumb and not have auto-update on. Which still is about 50% of the planet it seems... Quote Link to comment Share on other sites More sharing options...
sillymell0n Posted July 27, 2015 Author Share Posted July 27, 2015 Thank you! I did try to do due dilligance such as seaching wireshark, SSL, HTTPS, and reading pages of the "Ask me." Thanks again Appreciate the quick answers. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.