Anon3112 Posted February 3, 2014 Share Posted February 3, 2014 (edited) I was using Karma and sslstrip today and when I checked the sslstrip log I got this message: ....Can someone please tell me what it means? Edited February 3, 2014 by Anon3112 Quote Link to comment Share on other sites More sharing options...
Xcellerator Posted February 3, 2014 Share Posted February 3, 2014 It says that the DNS Lookup failed. Are you connected to the internet via the Pineapple in Client Mode on wlan1? On seconds, it appears that the address "www.islayer.com" doesn't actually exist? What were you doing browsing wise when you got this error? If it wasn't you, do you know who or what was connected (possibly through Karma) that made the DNS request? Quote Link to comment Share on other sites More sharing options...
Anon3112 Posted February 3, 2014 Author Share Posted February 3, 2014 I was connected to the internet via the pineapple so it wasn't that a client couldn't reach the internet and I was using Karma so I don't know who the client was :/ I'm guessing it means that the url doesn't exist? Quote Link to comment Share on other sites More sharing options...
Xcellerator Posted February 3, 2014 Share Posted February 3, 2014 Well, according to "Down for everyone or just me", the url doesn't exist. http://www.downforeveryoneorjustme.com/www.islayer.com Sslstrip *should* be able to handle that just fine, so I'm not sure why the logs freaked out like that. Maybe try disabling Karma and keep sslstrip running. Then try and browse to "www.islayer.com" or any other site that doesn't exist. If it happens again, it should be reported as a bug. UPDATE: After Googling "islayer" it appears that it was software for Hackintoshes (non-apple computers running hacked versions of OS X) that is no longer available. The device that connected could have been a hackintosh that automatically checked for updates and queried the URL in an odd way that sslstrip didn't like? Quote Link to comment Share on other sites More sharing options...
Anon3112 Posted February 3, 2014 Author Share Posted February 3, 2014 That sounds about right... I have just been through the wireshark logs to find the connection as well so I can do a bit of digging :) thank you for your help Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.