sslstrip SSLstrip2 + dns2proxy (HSTS Bypassing)

BennyGG · January 26, 2018

root@Pineapple:/sd/usr/share/dns2proxy# python dns2proxy.py --help
Traceback (most recent call last):
  File "dns2proxy.py", line 29, in <module>
    import pcapy
ImportError: File not found
root@Pineapple:/sd/usr/share/dns2proxy# dmesg
[    0.000000] Linux version 3.18.84 (@02fc9f092662) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #14 Mon Dec 25 22:24:59 UTC 2017
[    0.000000] MyLoader: sysp=8a14b024, boardp=44b65156, parts=b69f8d32
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Atheros AR9330 rev 1
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x03ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x03ffffff]
[    0.000000] Initmem setup node 0 [mem 0x00000000-0x03ffffff]
[    0.000000] On node 0 totalpages: 16384
[    0.000000] free_area_init_node: node 0, pgdat 80363cf0, node_mem_map 81000000
[    0.000000]   Normal zone: 128 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 16384 pages, LIFO batch:3
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line:  board=PINEAPPLE-NANO  console=ttyATH0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 60880K/65536K available (2515K kernel code, 148K rwdata, 536K rodata, 248K init, 188K bss, 4656K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:400.000MHz, DDR:400.000MHz, AHB:200.000MHz, Ref:25.000MHz
[    0.000000] Calibrating delay loop... 265.42 BogoMIPS (lpj=1327104)
[    0.080000] pid_max: default: 32768 minimum: 301
[    0.080000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.090000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.100000] NET: Registered protocol family 16
[    0.100000] MIPS: machine is WiFi Pineapple NANO
[    0.380000] Switched to clocksource MIPS
[    0.380000] NET: Registered protocol family 2
[    0.390000] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.390000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.400000] TCP: Hash tables configured (established 1024 bind 1024)
[    0.400000] TCP: reno registered
[    0.410000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.410000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.420000] NET: Registered protocol family 1
[    0.420000] PCI: CLS 0 bytes, default 32
[    0.430000] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.450000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.450000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.460000] msgmni has been set to 118
[    0.470000] io scheduler noop registered
[    0.470000] io scheduler deadline registered (default)
[    0.470000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.480000] ar933x-uart: ttyATH0 at MMIO 0x18020000 (irq = 11, base_baud = 1562500) is a AR933X UART
[    0.490000] console [ttyATH0] enabled
[    0.500000] bootconsole [early0] disabled
[    0.510000] m25p80 spi0.0: found mx25l12805d, expected m25p80
[    0.510000] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.520000] 5 tp-link partitions found on MTD device spi0.0
[    0.530000] Creating 5 MTD partitions on "spi0.0":
[    0.530000] 0x000000000000-0x000000020000 : "u-boot"
[    0.540000] 0x000000020000-0x00000013a07c : "kernel"
[    0.540000] 0x00000013a07c-0x000000ff0000 : "rootfs"
[    0.550000] mtd: device 2 (rootfs) set to be root filesystem
[    0.550000] 1 squashfs-split partitions found on MTD device rootfs
[    0.560000] 0x000000d80000-0x000000ff0000 : "rootfs_data"
[    0.570000] 0x000000ff0000-0x000001000000 : "art"
[    0.570000] 0x000000020000-0x000000ff0000 : "firmware"
[    0.590000] libphy: ag71xx_mdio: probed
[    1.190000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd041, driver=Generic PHY]
[    1.200000] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[    1.200000] TCP: cubic registered
[    1.200000] NET: Registered protocol family 17
[    1.210000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.220000] 8021q: 802.1Q VLAN Support v1.8
[    1.230000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    1.240000] Freeing unused kernel memory: 248K
[    2.830000] init: Console is alive
[    2.840000] init: - watchdog -
[    5.450000] usbcore: registered new interface driver usbfs
[    5.460000] usbcore: registered new interface driver hub
[    5.460000] usbcore: registered new device driver usb
[    5.520000] SCSI subsystem initialized
[    5.530000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    5.540000] ehci-platform: EHCI generic platform driver
[    5.540000] ehci-platform ehci-platform: EHCI Host Controller
[    5.550000] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1
[    5.560000] ehci-platform ehci-platform: irq 3, io mem 0x1b000000
[    5.580000] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00
[    5.580000] hub 1-0:1.0: USB hub found
[    5.580000] hub 1-0:1.0: 1 port detected
[    5.590000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.600000] ohci-platform: OHCI generic platform driver
[    5.610000] uhci_hcd: USB Universal Host Controller Interface driver
[    5.620000] usbcore: registered new interface driver usb-storage
[    5.910000] usb 1-1: new high-speed USB device number 2 using ehci-platform
[    5.970000] init: - preinit -
[    6.350000] hub 1-1:1.0: USB hub found
[    6.360000] hub 1-1:1.0: 4 ports detected
[    6.550000] random: procd urandom read with 11 bits of entropy available
[    6.710000] usb 1-1.1: new high-speed USB device number 3 using ehci-platform
[    7.130000] mount_root: loading kmods from internal overlay
[    7.250000] usb 1-1.2: new high-speed USB device number 4 using ehci-platform
[    7.560000] usb-storage 1-1.2:1.0: USB Mass Storage device detected
[    7.570000] scsi host0: usb-storage 1-1.2:1.0
[    7.650000] jffs2: notice: (328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    7.660000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[    7.680000] block: extroot: not configured
[    7.730000] jffs2: notice: (325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    7.850000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[    7.870000] block: extroot: not configured
[    7.870000] mount_root: switching to jffs2 overlay
[    7.930000] procd: - early -
[    7.930000] procd: - watchdog -
[    8.690000] scsi 0:0:0:0: Direct-Access     Generic  STORAGE DEVICE   0933 PQ: 0 ANSI: 6
[    8.990000] procd: - ubus -
[    9.030000] sd 0:0:0:0: [sda] 15523840 512-byte logical blocks: (7.94 GB/7.40 GiB)
[    9.050000] sd 0:0:0:0: [sda] Write Protect is off
[    9.050000] sd 0:0:0:0: [sda] Mode Sense: 21 00 00 00
[    9.050000] sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
[    9.070000]  sda: sda1 sda2
[    9.080000] sd 0:0:0:0: [sda] Attached SCSI removable disk
[    9.990000] procd: - init -
[   12.330000] EXT4-fs (sda1): couldn't mount as ext3 due to feature incompatibilities
[   12.350000] EXT4-fs (sda1): couldn't mount as ext2 due to feature incompatibilities
[   12.750000] EXT4-fs (sda1): recovery complete
[   12.760000] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null)
[   13.190000] Adding 1004336k swap on /dev/sdcard/sd2.  Priority:-1 extents:1 across:1004336k 
[   14.390000] Loading modules backported from Linux version v4.4-rc5-1913-gc8fdf68
[   14.400000] Backport generated by backports.git backports-20151218-0-g2f58d9d
[   14.560000] ath: EEPROM regdomain: 0x0
[   14.560000] ath: EEPROM indicates default country code should be used
[   14.560000] ath: doing EEPROM country->regdmn map search
[   14.560000] ath: country maps to regdmn code: 0x3a
[   14.560000] ath: Country alpha2 being used: US
[   14.560000] ath: Regpair used: 0x3a
[   14.570000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   14.570000] ieee80211 phy0: Atheros AR9330 Rev:1 mem=0xb8100000, irq=2
[   14.590000] usb 1-1.1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   14.590000] usbcore: registered new interface driver ath9k_htc
[   14.750000] RPC: Registered named UNIX socket transport module.
[   14.750000] RPC: Registered udp transport module.
[   14.750000] RPC: Registered tcp transport module.
[   14.760000] RPC: Registered tcp NFSv4.1 backchannel transport module.
[   14.790000] tun: Universal TUN/TAP device driver, 1.6
[   14.790000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[   14.840000] usbcore: registered new interface driver rt2800usb
[   14.850000] usbcore: registered new interface driver rtl8187
[   15.100000] usbcore: registered new interface driver rtl8192cu
[   15.140000] sd 0:0:0:0: Attached scsi generic sg0 type 0
[   15.150000] usbcore: registered new interface driver cdc_acm
[   15.160000] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[   15.170000] usbcore: registered new interface driver cdc_wdm
[   15.190000] nf_conntrack version 0.5.0 (955 buckets, 3820 max)
[   15.230000] usbcore: registered new interface driver ums-alauda
[   15.240000] usbcore: registered new interface driver ums-cypress
[   15.240000] usbcore: registered new interface driver ums-datafab
[   15.250000] usbcore: registered new interface driver ums-freecom
[   15.260000] usbcore: registered new interface driver ums-isd200
[   15.270000] usbcore: registered new interface driver ums-jumpshot
[   15.280000] usbcore: registered new interface driver ums-karma
[   15.290000] usbcore: registered new interface driver ums-sddr09
[   15.300000] usbcore: registered new interface driver ums-sddr55
[   15.310000] usbcore: registered new interface driver ums-usbat
[   15.330000] usbcore: registered new interface driver usbserial
[   15.340000] usbcore: registered new interface driver usbserial_generic
[   15.340000] usbserial: USB Serial support registered for generic
[   15.440000] xt_time: kernel timezone is -0000
[   15.450000] usbcore: registered new interface driver asix
[   15.450000] usb 1-1.1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   15.470000] usbcore: registered new interface driver ax88179_178a
[   15.480000] usbcore: registered new interface driver cdc_ether
[   15.490000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   15.520000] usbcore: registered new interface driver pl2303
[   15.520000] usbserial: USB Serial support registered for pl2303
[   15.530000] PPP generic driver version 2.4.2
[   15.540000] NET: Registered protocol family 24
[   15.550000] usbcore: registered new interface driver qmi_wwan
[   15.560000] usbcore: registered new interface driver rndis_host
[   15.570000] usbcore: registered new interface driver sierra_net
[   15.580000] usbcore: registered new interface driver option
[   15.590000] usbserial: USB Serial support registered for GSM modem (1-port)
[   15.700000] ath9k_htc 1-1.1:1.0: ath9k_htc: HTC initialized with 33 credits
[   15.940000] ath9k_htc 1-1.1:1.0: ath9k_htc: FW Version: 1.4
[   15.940000] ath9k_htc 1-1.1:1.0: FW RMW support: On
[   15.950000] ath: EEPROM regdomain: 0x0
[   15.950000] ath: EEPROM indicates default country code should be used
[   15.950000] ath: doing EEPROM country->regdmn map search
[   15.950000] ath: country maps to regdmn code: 0x3a
[   15.950000] ath: Country alpha2 being used: US
[   15.950000] ath: Regpair used: 0x3a
[   15.960000] ieee80211 phy1: Atheros AR9271 Rev:1
[   22.030000] random: nonblocking pool is initialized
[   26.320000] device eth0 entered promiscuous mode
[   32.100000] eth0: link up (100Mbps/Full duplex)
[   32.400000] br-lan: port 1(eth0) entered forwarding state
[   32.400000] br-lan: port 1(eth0) entered forwarding state
[   32.410000] device wlan0 entered promiscuous mode
[   32.510000] br-lan: port 2(wlan0) entered forwarding state
[   32.510000] br-lan: port 2(wlan0) entered forwarding state
[   32.600000] device wlan0-1 entered promiscuous mode
[   32.620000] br-lan: port 3(wlan0-1) entered forwarding state
[   32.620000] br-lan: port 3(wlan0-1) entered forwarding state
[   33.400000] br-lan: port 3(wlan0-1) entered disabled state
[   34.400000] br-lan: port 1(eth0) entered forwarding state
[   34.510000] br-lan: port 2(wlan0) entered forwarding state
[   35.270000] br-lan: port 3(wlan0-1) entered forwarding state
[   35.270000] br-lan: port 3(wlan0-1) entered forwarding state
[   37.090000] wlan1: authenticate with 6c:2e:85:fe:d4:01
[   37.270000] br-lan: port 3(wlan0-1) entered forwarding state
[   38.030000] wlan1: send auth to 6c:2e:85:fe:d4:01 (try 1/3)
[   38.050000] wlan1: authenticated
[   38.100000] wlan1: associate with 6c:2e:85:fe:d4:01 (try 1/3)
[   38.100000] wlan1: RX AssocResp from 6c:2e:85:fe:d4:01 (capab=0x411 status=0 aid=8)
[   38.150000] wlan1: associated

dmesg right after the error
using an sd card............

Zylla · January 26, 2018

@BennyGG
Now i remembered!
After the latest firmware update, they messed with some environment variable that was there previously.
I'll see if i can find a fix.
Meanwhile, to fix your problem you can edit /etc/profile to fix the issue
Here's a copy of my file: https://pastebin.com/jMrCxbHP

PS.
Skip modifying the line starting with "export PS1" if you don't want your terminal colorized ;)
Reboot after editing the file.

BennyGG · January 26, 2018

will try in an hour thanks

BennyGG · January 26, 2018

still got the issue unfortunately :{
editing the profile file didn't solve the ImportError

Zylla · January 26, 2018

1 minute ago, BennyGG said:

still got the issue unfortunately :{
editing the profile file didn't solve the ImportError

That's odd. Could you show me the output from this command?:

find / -name pcapy.so

BennyGG · January 26, 2018

"/sd/usr/lib/python2.7/site-packages/pcapy.so"

Zylla · January 26, 2018

Very strange.
I'm having no problems on my Nano, latest firmware, with that exact profile file in use.
Try testing, just to see if the variables are correctly set:

echo $PATH
echo $LD_LIBRARY_PATH

You should be getting this:

/usr/bin/pineapple:/bin:/sbin:/usr/bin:/usr/sbin:/sd/usr/bin:/sd/usr/sbin:/sd/bin:/sd/sbin

:/sd/lib:/sd/usr/lib:/sd/lib:/sd/usr/lib:/lib:/usr/lib

BennyGG · January 26, 2018

root@Pineapple:/sd/usr/share/dns2proxy# echo $LD_LIBRARY_PATH

:/sd/lib:/sd/usr/lib

this one isn't correct
maybe the profile you sent isn't correct because it matches the link you sent

Zylla · January 26, 2018

Odd. It should still find it, because it's located at the sd-card. Even if it had only the normal dirs it should find it due to the sym-link being created.
Have you tried a factory-reset, and start from scratch?

Zylla · January 26, 2018

Odd. It should still find it, because it's located at the sd-card. Even if it had only the normal dirs it should find it due to the sym-link being created.
Have you tried a factory-reset, and start from scratch?

BennyGG · January 26, 2018

will try now
will be back with results

BennyGG · January 26, 2018

root@Pineapple:~# dns2proxy -help
Traceback (most recent call last):
  File "/usr/bin/dns2proxy", line 29, in <module>
    import pcapy
ImportError: File not found
root@Pineapple:~# dmesg
[    0.000000] Linux version 3.18.84 (@02fc9f092662) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #14 Mon Dec 25 22:24:59 UTC 2017
[    0.000000] MyLoader: sysp=8a14b024, boardp=44b65156, parts=b69f8d32
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Atheros AR9330 rev 1
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x03ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x03ffffff]
[    0.000000] Initmem setup node 0 [mem 0x00000000-0x03ffffff]
[    0.000000] On node 0 totalpages: 16384
[    0.000000] free_area_init_node: node 0, pgdat 80363cf0, node_mem_map 81000000
[    0.000000]   Normal zone: 128 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 16384 pages, LIFO batch:3
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line:  board=PINEAPPLE-NANO  console=ttyATH0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 60880K/65536K available (2515K kernel code, 148K rwdata, 536K rodata, 248K init, 188K bss, 4656K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:400.000MHz, DDR:400.000MHz, AHB:200.000MHz, Ref:25.000MHz
[    0.000000] Calibrating delay loop... 265.42 BogoMIPS (lpj=1327104)
[    0.080000] pid_max: default: 32768 minimum: 301
[    0.080000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.090000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.100000] NET: Registered protocol family 16
[    0.100000] MIPS: machine is WiFi Pineapple NANO
[    0.380000] Switched to clocksource MIPS
[    0.380000] NET: Registered protocol family 2
[    0.390000] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.390000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.400000] TCP: Hash tables configured (established 1024 bind 1024)
[    0.400000] TCP: reno registered
[    0.410000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.410000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.420000] NET: Registered protocol family 1
[    0.420000] PCI: CLS 0 bytes, default 32
[    0.430000] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.450000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.450000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.470000] msgmni has been set to 118
[    0.470000] io scheduler noop registered
[    0.470000] io scheduler deadline registered (default)
[    0.480000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.480000] ar933x-uart: ttyATH0 at MMIO 0x18020000 (irq = 11, base_baud = 1562500) is a AR933X UART
[    0.490000] console [ttyATH0] enabled
[    0.500000] bootconsole [early0] disabled
[    0.510000] m25p80 spi0.0: found mx25l12805d, expected m25p80
[    0.520000] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.520000] 5 tp-link partitions found on MTD device spi0.0
[    0.530000] Creating 5 MTD partitions on "spi0.0":
[    0.530000] 0x000000000000-0x000000020000 : "u-boot"
[    0.540000] 0x000000020000-0x00000013a07c : "kernel"
[    0.540000] 0x00000013a07c-0x000000ff0000 : "rootfs"
[    0.550000] mtd: device 2 (rootfs) set to be root filesystem
[    0.550000] 1 squashfs-split partitions found on MTD device rootfs
[    0.560000] 0x000000d80000-0x000000ff0000 : "rootfs_data"
[    0.570000] 0x000000ff0000-0x000001000000 : "art"
[    0.570000] 0x000000020000-0x000000ff0000 : "firmware"
[    0.600000] libphy: ag71xx_mdio: probed
[    1.190000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd041, driver=Generic PHY]
[    1.200000] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[    1.200000] TCP: cubic registered
[    1.200000] NET: Registered protocol family 17
[    1.210000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.220000] 8021q: 802.1Q VLAN Support v1.8
[    1.230000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    1.240000] Freeing unused kernel memory: 248K
[    2.830000] init: Console is alive
[    2.840000] init: - watchdog -
[    5.450000] usbcore: registered new interface driver usbfs
[    5.460000] usbcore: registered new interface driver hub
[    5.460000] usbcore: registered new device driver usb
[    5.520000] SCSI subsystem initialized
[    5.530000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    5.540000] ehci-platform: EHCI generic platform driver
[    5.540000] ehci-platform ehci-platform: EHCI Host Controller
[    5.550000] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1
[    5.560000] ehci-platform ehci-platform: irq 3, io mem 0x1b000000
[    5.590000] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00
[    5.590000] hub 1-0:1.0: USB hub found
[    5.590000] hub 1-0:1.0: 1 port detected
[    5.600000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.610000] ohci-platform: OHCI generic platform driver
[    5.620000] uhci_hcd: USB Universal Host Controller Interface driver
[    5.630000] usbcore: registered new interface driver usb-storage
[    5.920000] usb 1-1: new high-speed USB device number 2 using ehci-platform
[    5.970000] init: - preinit -
[    6.240000] hub 1-1:1.0: USB hub found
[    6.240000] hub 1-1:1.0: 4 ports detected
[    6.790000] usb 1-1.1: new high-speed USB device number 3 using ehci-platform
[    6.870000] random: procd urandom read with 11 bits of entropy available
[    7.120000] mount_root: loading kmods from internal overlay
[    7.640000] jffs2: notice: (326) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 13 of xref (0 dead, 13 orphan) found.
[    7.660000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[    7.670000] block: extroot: not configured
[    7.750000] jffs2: notice: (323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 13 of xref (0 dead, 13 orphan) found.
[    7.880000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[    7.890000] block: extroot: not configured
[    7.890000] mount_root: switching to jffs2 overlay
[    7.970000] procd: - early -
[    7.970000] procd: - watchdog -
[    9.020000] procd: - ubus -
[   10.240000] procd: - init -
[   11.870000] usb 1-1.1: device descriptor read/64, error -145
[   12.230000] usb 1-1.2: new high-speed USB device number 4 using ehci-platform
[   12.370000] usb-storage 1-1.2:1.0: USB Mass Storage device detected
[   12.390000] scsi host0: usb-storage 1-1.2:1.0
[   13.640000] scsi 0:0:0:0: Direct-Access     Generic  STORAGE DEVICE   0933 PQ: 0 ANSI: 6
[   14.070000] sd 0:0:0:0: [sda] 15523840 512-byte logical blocks: (7.94 GB/7.40 GiB)
[   14.100000] sd 0:0:0:0: [sda] Write Protect is off
[   14.100000] sd 0:0:0:0: [sda] Mode Sense: 21 00 00 00
[   14.110000] sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
[   14.150000]  sda: sda1 sda2
[   14.170000] sd 0:0:0:0: [sda] Attached SCSI removable disk
[   15.320000] Loading modules backported from Linux version v4.4-rc5-1913-gc8fdf68
[   15.330000] Backport generated by backports.git backports-20151218-0-g2f58d9d
[   15.550000] ath: EEPROM regdomain: 0x0
[   15.550000] ath: EEPROM indicates default country code should be used
[   15.550000] ath: doing EEPROM country->regdmn map search
[   15.550000] ath: country maps to regdmn code: 0x3a
[   15.550000] ath: Country alpha2 being used: US
[   15.550000] ath: Regpair used: 0x3a
[   15.560000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   15.560000] ieee80211 phy0: Atheros AR9330 Rev:1 mem=0xb8100000, irq=2
[   15.580000] usb 1-1.1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   15.590000] usbcore: registered new interface driver ath9k_htc
[   15.740000] RPC: Registered named UNIX socket transport module.
[   15.740000] RPC: Registered udp transport module.
[   15.740000] RPC: Registered tcp transport module.
[   15.750000] RPC: Registered tcp NFSv4.1 backchannel transport module.
[   15.780000] tun: Universal TUN/TAP device driver, 1.6
[   15.780000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[   15.870000] usbcore: registered new interface driver rt2800usb
[   15.920000] usbcore: registered new interface driver rtl8187
[   16.010000] usbcore: registered new interface driver rtl8192cu
[   16.090000] sd 0:0:0:0: Attached scsi generic sg0 type 0
[   16.120000] usbcore: registered new interface driver cdc_acm
[   16.120000] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[   16.130000] usbcore: registered new interface driver cdc_wdm
[   16.150000] nf_conntrack version 0.5.0 (955 buckets, 3820 max)
[   16.240000] usbcore: registered new interface driver ums-alauda
[   16.270000] usbcore: registered new interface driver ums-cypress
[   16.270000] usbcore: registered new interface driver ums-datafab
[   16.280000] usbcore: registered new interface driver ums-freecom
[   16.290000] usbcore: registered new interface driver ums-isd200
[   16.300000] usbcore: registered new interface driver ums-jumpshot
[   16.320000] usbcore: registered new interface driver ums-karma
[   16.330000] usbcore: registered new interface driver ums-sddr09
[   16.350000] usbcore: registered new interface driver ums-sddr55
[   16.360000] usbcore: registered new interface driver ums-usbat
[   16.390000] usb 1-1.1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   16.410000] usbcore: registered new interface driver usbserial
[   16.420000] usbcore: registered new interface driver usbserial_generic
[   16.420000] usbserial: USB Serial support registered for generic
[   16.610000] xt_time: kernel timezone is -0000
[   16.630000] usbcore: registered new interface driver asix
[   16.640000] ath9k_htc 1-1.1:1.0: ath9k_htc: HTC initialized with 33 credits
[   16.660000] usbcore: registered new interface driver ax88179_178a
[   16.700000] usbcore: registered new interface driver cdc_ether
[   16.710000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   16.770000] usbcore: registered new interface driver pl2303
[   16.780000] usbserial: USB Serial support registered for pl2303
[   16.790000] PPP generic driver version 2.4.2
[   16.810000] NET: Registered protocol family 24
[   16.810000] usbcore: registered new interface driver qmi_wwan
[   16.820000] usbcore: registered new interface driver rndis_host
[   16.840000] usbcore: registered new interface driver sierra_net
[   16.860000] usbcore: registered new interface driver option
[   16.870000] usbserial: USB Serial support registered for GSM modem (1-port)
[   17.040000] ath9k_htc 1-1.1:1.0: ath9k_htc: FW Version: 1.4
[   17.040000] ath9k_htc 1-1.1:1.0: FW RMW support: On
[   17.050000] ath: EEPROM regdomain: 0x0
[   17.050000] ath: EEPROM indicates default country code should be used
[   17.050000] ath: doing EEPROM country->regdmn map search
[   17.050000] ath: country maps to regdmn code: 0x3a
[   17.050000] ath: Country alpha2 being used: US
[   17.050000] ath: Regpair used: 0x3a
[   17.060000] ieee80211 phy1: Atheros AR9271 Rev:1
[   17.360000] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: 
[   17.530000] EXT4-fs (sda1): couldn't mount as ext3 due to feature incompatibilities
[   17.540000] EXT4-fs (sda1): couldn't mount as ext2 due to feature incompatibilities
[   17.560000] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null)
[   17.780000] Adding 1004336k swap on /dev/sdcard/sd2.  Priority:-1 extents:1 across:1004336k 
[   26.780000] device eth0 entered promiscuous mode
[   31.990000] eth0: link up (100Mbps/Full duplex)
[   31.990000] br-lan: port 1(eth0) entered forwarding state
[   32.000000] br-lan: port 1(eth0) entered forwarding state
[   32.780000] device wlan0 entered promiscuous mode
[   32.780000] br-lan: port 2(wlan0) entered forwarding state
[   32.790000] br-lan: port 2(wlan0) entered forwarding state
[   32.990000] br-lan: port 2(wlan0) entered disabled state
[   33.090000] br-lan: port 2(wlan0) entered forwarding state
[   33.090000] br-lan: port 2(wlan0) entered forwarding state
[   33.180000] device wlan0-1 entered promiscuous mode
[   33.200000] br-lan: port 3(wlan0-1) entered forwarding state
[   33.200000] br-lan: port 3(wlan0-1) entered forwarding state
[   33.990000] br-lan: port 3(wlan0-1) entered disabled state
[   34.000000] br-lan: port 1(eth0) entered forwarding state
[   35.090000] br-lan: port 2(wlan0) entered forwarding state
[   35.260000] random: nonblocking pool is initialized
[   35.710000] br-lan: port 3(wlan0-1) entered forwarding state
[   35.710000] br-lan: port 3(wlan0-1) entered forwarding state
[   37.150000] wlan1: authenticate with 6c:2e:85:fe:d4:01
[   37.500000] wlan1: send auth to 6c:2e:85:fe:d4:01 (try 1/3)
[   37.520000] wlan1: authenticated
[   37.530000] wlan1: associate with 6c:2e:85:fe:d4:01 (try 1/3)
[   37.540000] wlan1: RX AssocResp from 6c:2e:85:fe:d4:01 (capab=0x411 status=0 aid=7)
[   37.550000] wlan1: associated
[   37.710000] br-lan: port 3(wlan0-1) entered forwarding

here's dmesg right after booting fresh, editing profile and installing using the script
got the error again
are there any special property's that needed to be set before running it?

Zylla · January 27, 2018

@BennyGG
I simply launched the install-script on my factory-reset Nano, edited the environment vars. and it works perfectly.
Considering the amount of people strugling with both this package. and my other one (ManaToolkit), i'm considering making a detailed video-tutorial for setting each one up..
What do you think about that?

BennyGG · January 27, 2018

could be perfect making video tutorials
make sure they are 720p and above ;)

Just now, Zylla said:

@BennyGG
I simply launched the install-script on my factory-reset Nano, edited the environment vars. and it works perfectly.
Considering the amount of people strugling with both this package. and my other one (ManaToolkit), i'm considering making a detailed video-tutorial for setting each one up..
What do you think about that?

did you use and sd card or usb stick?

Zylla · January 27, 2018

Just now, BennyGG said:

could be perfect making video tutorials
make sure they are 720p and above ;)

did you use and sd card or usb stick?

I'm not using an SD-card. The bug with sd-cards is making my Nano useless.
So i use a mem-stick all the time.
The bug doesn't only happen when using my Toolkits, it's everywhere.
However, it's barely noticable when only using the default Modules that one can download, as they don't read/write as heavy as these toolkits might do.
First time i experienced the bug was when i was trying out Wifite on my Nano right after purchasing it.

BennyGG · January 27, 2018

i am using an sd card so i guess that's the problem i will try in about 2 days with usb stick

btw did you try using usb to sd card converter as a usb stick?

maybe the problem is with the sd card modulte they put in there
perhaps something fixable

vikingvn · January 31, 2018

hi,@Zylla:

Thks for your work on the IPK, I can run this on my nano. But I got 2 issues about this:

1. On sslstrip working, exception always came out <"exceptions.AttributeError: ClientRequest instance has no attribute 'responseHeader'" >

According to this post:

I removed the error info. Maybe U should update the py files in your IPK ? or Am I the only one who saw these exceptions?

2. I ran all commands just as you did mentioned in your previous post, including dns2proxy. I can't get texted passward in log files neither (btw, I tested it on my mobile phone, the server response time did prolonged <always got timeout on waiting response>, I can see lots of "Get Https" but few "Post http" in debug_ssl.log).

is 400Mhz CPU enough for this tools right ?

Do you get any advice on this ? thanks!

Zylla · March 2, 2018

On 31.1.2018 at 12:37 PM, vikingvn said:

hi,@Zylla:

Thks for your work on the IPK, I can run this on my nano. But I got 2 issues about this:

1. On sslstrip working, exception always came out <"exceptions.AttributeError: ClientRequest instance has no attribute 'responseHeader'" >

According to this post:

I removed the error info. Maybe U should update the py files in your IPK ? or Am I the only one who saw these exceptions?

2. I ran all commands just as you did mentioned in your previous post, including dns2proxy. I can't get texted passward in log files neither (btw, I tested it on my mobile phone, the server response time did prolonged <always got timeout on waiting response>, I can see lots of "Get Https" but few "Post http" in debug_ssl.log).

is 400Mhz CPU enough for this tools right ?

Do you get any advice on this ? thanks!

Thanks for the heads up, will look into it asap. Been busy the last few days and currently with moving from our old house. So, i'll see what i can get done on my spare-time. Does Python crash when this happens?

To be honest: no. 400MHz, and limited RAM, is actually not enough to run these tools with many clients connected. You should set a client-limit on the Nano.
And yeah, pre-compile the .py files on your entire Nano. Link to guide here:

(It should speed up your python processes a bit! Since that's the bottle-neck with the Toolkit on the Nano)

marechok · March 9, 2018

i have some problems about sslstrip2 and stil couldnt find the solution...

i downloaded the sslstrip2 and dns2proxy ...
i forwarded my ip echo "1" > /proc/sys/net/ipv4/ip_forward and
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080
iptables -t nat -A PREROUTING -p udp --destination-port 53 -j REDIRECT --to-port 53
python sslstrip.py -l 8080 -p -w log.txt
DNS2PROXY settings
./ia.sh router ip router ip (i want to capture packets of router )
ettercap -Tqi wlan0 -M ARP:remote /router ip// (which is my windows 10 and kali is on the same computer with VMware )
Dns2proxy Settings
domains.cfg
.facebook.com 192.168.1.1
.gmail.com 192.168.1.1
.hotmail.com 192.168.1.1
(THIS IP IS router's ip )
spoof.cfg
www.s21sec.com 192.168.1.1
ia.sh
adminip=" my localip"
When i open sites without HTTPS i get username & passwords .otherwise in the screen i see
DHCP : Request IPs(network only shows me that which IP's are using the network)
DHCP : Discover
so what is the problem ? what is the wrong with them ?
questions.
q name = www.google-analytics.com
Query = www.google-analytics.com A
Adding fake IP = 192.168.2.1
Adding fake IP = 192.168.2.1
Adding real IP = 216.58.212.46
Sending response...
waiting requests.
serving a request.
Dns proxy address is router's ip ... but it doesnt help ..Sometimes it works and shows some https sites but most of the times it doesnt work i do something wrong but what is the wrong and it doesnt save log files when i close the application with CTRL+C ..... log.txt ...

Zylla · March 9, 2018

2 minutes ago, marechok said:

i have some problems about sslstrip2 and stil couldnt find the solution...

i downloaded the sslstrip2 and dns2proxy ...
i forwarded my ip echo "1" > /proc/sys/net/ipv4/ip_forward and
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080
iptables -t nat -A PREROUTING -p udp --destination-port 53 -j REDIRECT --to-port 53

Looking fast at your iptables, i'm noticing you're only forwarding port 80. (HTTP)
Which is fine, but you're also interested in forwarding the SSL traffic, which goes over port 443.
I suggest you try enabling that as well.

But don't have your hopes high when it comes to success-rate. Most browsers now are updated and protected against this version of the attack by using dns-caches as an example.
Some clients however are susceptible to this attack though.
Sadly the best attacks don't work that well yet on these embedded devices, like mitmproxy. Due to requiring alot of CPU/memory.

marechok · March 10, 2018

ok if i forward port 443 to 8080 . I listen 8080 port with SSLStrip .. but sometimes it shows sites... but most of the time it doesnt work :S

Zylla · March 10, 2018

7 hours ago, marechok said:

ok if i forward port 443 to 8080 . I listen 8080 port with SSLStrip .. but sometimes it shows sites... but most of the time it doesnt work :S

Yeah, as i stated: modern and updated browsers are updated against this attack.
But still, some clients and some software are still vulnerable to it.

marechok · March 11, 2018

On 10.03.2018 at 7:42 PM, Zylla said:

Yeah, as i stated: modern and updated browsers are updated against this attack.
But still, some clients and some software are still vulnerable to it.

yes you are right https sites when they get packets while i using them suddenly they close their connections to me .. but Http sites are working fine when you post some user and passwords it shows it but http sites are very few .... the most important thing is how can we encrypt RSA encryption between the packets from 80

Virgula · March 17, 2018

On 15/1/2017 at 3:23 PM, Zylla said:
SSLstrip2 + dns2proxy
^{Now WORKING on the Pineapple NANO + TETRA.}

Last update: 15.01.2017
Changelog:

Uploaded everything to github.

Install procedure:
root@Pineapple:~#  wget -qO- https://raw.githubusercontent.com/adde88/sslstrip-hsts-openwrt/master/INSTALL.sh | bash -s -- -v -v
^{(This launches a install script that downloads a .ipk file containing the tools, and installs all the python-libaries correctly.)}

What now?
sslstrip2 and dns2proxy gets installed to /usr/share/, or /sd/usr/share when using the Pineapple NANO.
When using dns2proxy, please check that you traverse into its directory before launching it. (If not you might encounter errors about missing files: (nospoof.cfg) etc.)
root@Pineapple:~# cd /sd/usr/share/sslstrip2/
root@Pineapple:~# python sslstrip.py --help

root@Pineapple:~# cd /sd/usr/share/dns2proxy/
root@Pineapple:~# python dns2proxy.py --help
Github repo. + source-files:
https://github.com/adde88/sslstrip-hsts-openwrt

OPKG Installation File: (For those who want to install it manually)
https://github.com/adde88/sslstrip-hsts-openwrt/raw/master/sslstrip-hsts_0.9_ar71xx.ipk

I did

root@Pineapple:~#  wget -qO- https://raw.githubusercontent.com/adde88/sslstrip-hsts-openwrt/master/INSTALL.sh | bash -s -- -v -v

and then

cd /usr/share/sslstrip2/

beacuse I haven't an sd external card but :

-ash: cd: can't cd to /usr/share/sslstrip2/

and if I want to see the directory I do

cd /usr/share/ && ls

but no directory named ssltrip2 exists

p.s i have already an installed version of ssltrip from pineapple modules

Zylla · March 19, 2018

On 17.3.2018 at 8:42 AM, Virgula said:
I did
root@Pineapple:~#  wget -qO- https://raw.githubusercontent.com/adde88/sslstrip-hsts-openwrt/master/INSTALL.sh | bash -s -- -v -v
and then
cd /usr/share/sslstrip2/
beacuse I haven't an sd external card but :
-ash: cd: can't cd to /usr/share/sslstrip2/
and if I want to see the directory I do
cd /usr/share/ && ls
but no directory named ssltrip2 exists

p.s i have already an installed version of ssltrip from pineapple modules

You could try tranferring the install-file (.IPK) to your Pineapple.

then install it using opkg.

for example:

opkg install «name-of-install-file.ipk» —dest sd

Sign In

sslstrip SSLstrip2 + dns2proxy (HSTS Bypassing)

Recommended Posts

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Archived

Recently Browsing 0 members