dr0p Posted February 28, 2009 Share Posted February 28, 2009 Okay, I just installed sslstrip and was playing around with it, and unfortunately I'm having some problems. sslstrip is trying its hardest to do it's job, but for some reason the client ignores sslstrip's packets and accepts the original ones, and this is where I'm very confused. I uploaded an example capture here: http://www.mediafire.com/download.php?lntmzgiolon . Does anyone have any ideas why this is happening? Quote Link to comment Share on other sites More sharing options...
DingleBerries Posted February 28, 2009 Share Posted February 28, 2009 Your not redirecting there traffic to you, or they wouldn't be getting the source packets :P. Be sure your giving the vic the right ip & mac. Other than that i havent had problems using sslstrip. Quote Link to comment Share on other sites More sharing options...
dr0p Posted February 28, 2009 Author Share Posted February 28, 2009 I know... that's why I'm really confused... I ran... # arpspoof -t 192.168.1.1 192.168.1.3 # arpspoof -t 192.168.1.3 192.168.1.1 # sslstrip # tcpdump -i eth0 -w test.pcap not arp Quote Link to comment Share on other sites More sharing options...
DingleBerries Posted February 28, 2009 Share Posted February 28, 2009 This is the easiest way of doing it: http://su2.info/doc/arpspoof.php Of course you can do it the long way with file over cable, the best imo, but arp spoof will work as well. Make sure you have the targets mac right. Quote Link to comment Share on other sites More sharing options...
dr0p Posted February 28, 2009 Author Share Posted February 28, 2009 That's exactly what I did >_< Quote Link to comment Share on other sites More sharing options...
DingleBerries Posted February 28, 2009 Share Posted February 28, 2009 I would go about it the long way then, and be sure your on a switched network. OffSec101 videos are really good at explaining it. Quote Link to comment Share on other sites More sharing options...
dr0p Posted March 1, 2009 Author Share Posted March 1, 2009 I'm definitely on a switched network, so I'll have to check out the long way... Quote Link to comment Share on other sites More sharing options...
vector Posted March 1, 2009 Share Posted March 1, 2009 heres a good read from tamosoft. i use alot of their programs, for the purpose that you're talking about i use commview for wifi. http://www.tamos.com/htmlhelp/monitoring/ Quote Link to comment Share on other sites More sharing options...
dr0p Posted March 2, 2009 Author Share Posted March 2, 2009 Okay, so I tried everything you guys mentioned and it's not working and I really don't know why. I think it has something to do with my router, because I can take the same computer to another network and it will work fine... but the only piece of networking equipment I have is a WPN824v3. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.