i8igmac Posted July 7, 2014 Share Posted July 7, 2014 so. I have tried sending some fb traffic threw sslstrip and I get nothing. I have tried sending fb traffic threw burp proxy and the browser wont even ask to install the cert. Google traffics works fine with sslstrip and burp certs I would like to capture some headers for automated task's... I have done all this before but today I notice facebook wont give... Can some one try sslstrip on facebook? let me know if its working or not? Quote Link to comment Share on other sites More sharing options...
cooper Posted July 7, 2014 Share Posted July 7, 2014 I'd expect Facebook and its ilk to use WebSockets (because HTML 4.01 is SOOO yesteryear) which might be out of scope for sslstrip/burp? At least for the subsequent traffic between client and FB. Quote Link to comment Share on other sites More sharing options...
Skorpinok Rover Posted July 14, 2014 Share Posted July 14, 2014 (edited) so. I have tried sending some fb traffic threw sslstrip and I get nothing. I have tried sending fb traffic threw burp proxy and the browser wont even ask to install the cert. Google traffics works fine with sslstrip and burp certs I would like to capture some headers for automated task's... I have done all this before but today I notice facebook wont give... Can some one try sslstrip on facebook? let me know if its working or not? dude am not a perfectionist, am not a pro, & definetly am not technically advanced.. i have a little advice for you facebbok uses https:// its means that its (secured) i too have tried with burp since 2 years there's not much u can do...as per me.. otherwise its upto you Edited July 14, 2014 by Skorpinok Rover Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.