gabehcoud Posted April 12, 2016 Share Posted April 12, 2016 Well, for the past year or so, i have been using cain and abel to sniff http passwords and pop3 passwords and i was doing okay, but not as efficient as i wanted. My friend recommended me a wifi pineapple so i bought a nano tactical and a tetra tactical. i somewhat understand how to set it up but i was wondering if there was any sort of module that would give me a similar sort of user interface where i can just afk and have it crawl for psws. considering i spent $525 aud on the pineapples and like 200 on postage, i really hope i'll be able to do a similar thing, possibly this time with https sites. i saw a video on ssl strip but the closest module i could find is ssl split and the output its not very clear. Quote Link to comment Share on other sites More sharing options...
Bitbot17 Posted April 12, 2016 Share Posted April 12, 2016 module like sslstrip or something similar like that, there is a person here who made the module for that. i think his name is whistlemaster. keep in mind that cain and able is a very old program and hasn't been updated (since 2010? i think) Quote Link to comment Share on other sites More sharing options...
ale Posted April 13, 2016 Share Posted April 13, 2016 SSLStrip doesn't work anymore due to the implementation of HSTS. that being said. the pineapple can be used for a lot of different cool stuff other than SSLstripping. Quote Link to comment Share on other sites More sharing options...
gabehcoud Posted April 13, 2016 Author Share Posted April 13, 2016 I'm not that interested in HTTPS, i just want to be able to sniff HTTP and POP3 on an OPEN network, i read about using responder but there isn't any documentation that i could find or a tutorial on it. Quote Link to comment Share on other sites More sharing options...
ale Posted April 14, 2016 Share Posted April 14, 2016 Can't you use ettercap for that? or wait till they release SSLStrip maybe? 1 Quote Link to comment Share on other sites More sharing options...
QSDx25 Posted May 2, 2016 Share Posted May 2, 2016 Can't you use ettercap for that? or wait till they release SSLStrip maybe? SSLStrip is still in the module list? https://www.wifipineapple.com/modules Quote Link to comment Share on other sites More sharing options...
Foxtrot Posted May 3, 2016 Share Posted May 3, 2016 SSLStrip is still in the module list? https://www.wifipineapple.com/modules That says SSLSPLIT, not SSLSTRIP. Quote Link to comment Share on other sites More sharing options...
QSDx25 Posted May 3, 2016 Share Posted May 3, 2016 I guess that one can be used as well in combination with wireshark and generated ssl cert or environment variables ? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.