Jump to content
Whistle Master

[Official - Not yet released] SSLstrip

Recommended Posts

Module: SSLstrip

Version: 1.0

Features:

  • Install dependencies
  • Manage firewall rules
  • Live output with filter options
  • Run History
  • Autostart on boot

83kxlmhk4vhsuhx4g.jpg7yh1132sbc1tam94g.jpgdnfmo1d7jf0tcft4g.jpg

Edited by Whistle Master
  • Upvote 2

Share this post


Link to post
Share on other sites

I know that there's a SSLStrip module for the Nano but I am wondering, what version is it? Is it the version 1 one or is it version 2 that utilizes some stuff with the DNS to get rid of the HSTS headers?

Share this post


Link to post
Share on other sites

Hello!

My Nano arrived today - I need to learn how to use it a little better; seems a little awkward, sometimes I can join other times I cannot. That's a later problem. So...

I saw a forum post about sslstrip 1.0 but I cannot find it in the module download page.

Is anyone able to help with how to install?

I found a few good ones and so far my favourite is urlsnarf (thank you creator! It's great). Have not tried much else yet.

If anyone can help can help with sslstrip that would

Be great!

So far the nano is pretty cool! Better than I expected, just a learning curve required I think.

Thanks!!

Share this post


Link to post
Share on other sites

Hi, i just think it will be available later. As the nano is quite new, more and more modules appear slowly...

So, just wait ... Not sure it will be long

Share this post


Link to post
Share on other sites

I just got my pineapple nano a couple of days ago and was looking into sslstrip but I can't seem to find anything about it with the nano only with the MARK V. Is there any way to install sslstrip on the pineapple nano?

Share this post


Link to post
Share on other sites

First, Thank you Whistle Master for all of your work!  I have been learning a lot from your modules.

Sorry for what I'm sure is a basic question.  I have tried searching as best I can...  how can I obtain an updated version of sslstrip (0.5.0) ?  I can't find a compiled one and from what I have read I can't compile on the pineapple.  I'm completely new to cross compiling in linux, but if that's the direction I need to go I will figure it out.  If anyone can point me in the right direction I would appreciate it!

Reason for it is the need to work with sha256 which has been added to version 0.5.0.

Thanks!

Share this post


Link to post
Share on other sites

hello, in can't find in the gui or opkg install sslstrip

 

it says :

 opkg install sslstrip
Unknown package 'sslstrip'.
Collected errors:
 * opkg_install_cmd: Cannot install package sslstrip.
 

thanks

 

jl

 

Share this post


Link to post
Share on other sites

Just wondering if there will be a module for sslstrip for the wifi pineapple nano and tetra?

There is still one for the mark 5 and that's it.

Share this post


Link to post
Share on other sites

@Zylla has been working on it for sometime but has been waiting to upload to the module manger to make sure it works no matter what.

Share this post


Link to post
Share on other sites

Ok that's good, i didn't know if anyone was working on it. I'm glad someone is working on it and it's great to know @Zylla is actually taking the time to make sure it works and not rushing it. It makes for a better module.

Can't wait to see the finished product.

Share this post


Link to post
Share on other sites
On 7/20/2017 at 11:07 AM, Lord_KamOS said:

Because its outdated, the pineapple has SSLSplit (does the same) and SSLStrip2

SSLsplit is not the same as SSLstrip.

@Whistle Master Are you still working on this module?

Share this post


Link to post
Share on other sites

Well, the module is ready but not the dependencies, which is on @Sebkinne's hands.

But as sslstrip2 is working (Thanks to @Zilla), I wonder if I should not see with him to make a module out of his work.

Edited by Whistle Master
  • Like 1

Share this post


Link to post
Share on other sites
26 minutes ago, Whistle Master said:

But as sslstrip2 is working (Thanks to @Zilla), I wonder if I should not see with him to make a module out of his work.

That Collaboration would be great!

Maybe you could also build in this one into site survey @Whistle Master  you can use it to both target individual SSID's as well as blanket gathering :)  I have  used it and found the handshake files to be much more reliable.

 

Share this post


Link to post
Share on other sites

Hi Whistle Master... i have a question...

you have sslstrip module working con pineapple NANO? you can share this module for testing? thanks for your time.

Share this post


Link to post
Share on other sites
10 minutes ago, Zylla said:

Yeh, that's what i suspected.
Either you can add these two lines to this file: /etc/profile :


export PATH=$PATH:/sd/usr/bin:/sd/usr/sbin:/sd/bin:/sd/sbin
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/sd/lib:/sd/usr/lib:/lib:/usr/lib

OR. Download this version i posted to pastebin, and repliace your version with it. (It will give you a fancy red terminal when logging in with SSH as well)

This should fix your issues. (Reboot the nano after making the changes)
Tagging you @Sebkinne. Just in case you werent aware of this. :)

 

Share this post


Link to post
Share on other sites

I'm trying to configure out an attack on my router... so I set successfully the attack and pineapple create the "free wifi " from wpa2 protected device....

UhLrqJ7.png

Now I'm trying to use ssltrip to intercept passwords on https... and I connected my device to test this...

3xTqblE.png

I start ssltrip but If I go on an https site from my phone trying to access, ssl trip is still freezed on this moment forever and it doesn't work:


fMQQOuM.png

Why? how can I resolve?

Share this post


Link to post
Share on other sites

For some reason, I can not find the module that would downgrade HTTPS to HTTP, however, I see a lot of tutorials on what seems to be an older version of wifi pineapple that has that functionality included.

My questions are:

1) Is there a way for me to install a module, from, let's say GitHub?

2)Is there a module that is able to do the functionality that I described above?

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...