Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • #29464
    Dilol
    Participant

    HI, I got an issue while trying the mitm attack with ettercap and sslstrip. Basically I followed the instructions, and it work with http, but not with Https.
    I cleaned up the cache on the victim’s pc but it doesn’t go. Have you some tips?

    #29598
    Zaid SabihZaid Sabih
    Moderator

    Hello Dilol,

    ​Can I see the result of ​ifconfig ​in Kali, ​ipconfig ​in the target machine and the ettercap command you used please?

    Can you also show me Kali’s network settings, so just right click the Kali machine from Virtual box >> Settings ?? Network, take a screenshot and post it here please.​​​

    And which websites did you test this with?

    #36253
    Mzm
    Participant

    Section: Post connection attacks
    Subsection: Setting Up SSLstrip Manually To Bypass HTTPS & Sniff Data From HTTPS Websites

    Hi Zaid, stuck here with sslstrip, not installed in my kali linux. Can you please help me, how to install sslstrip to do the labs. Thank you.

    #36287
    Diego PérezDiego Pérez
    Moderator

    Hi Mzm!
    Are you sure you are using custom kali image provided by Zaid? If you downloaded it recently then sslstrip should be there.
    Also you can try to get it from official github:
    https://github.com/moxie0/sslstrip

    Let me know how it goes!
    Diego

    #36320
    Mzm
    Participant

    Thanks for helping. Using the updated custom kali image provided by Zaid. It’s working now.

    #36405
    Diego PérezDiego Pérez
    Moderator

    Hi Mzm!

    Cool you got it!
    Diego

Viewing 6 posts - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.
Privacy Overview
ZSecurity logo featuring a stylized red letter Z

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

Strictly Necessary Cookies

Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.

3rd Party Cookies

This website uses Google Analytics and Linkedin to collect anonymous information such as the number of visitors to the site, and the most popular pages.

Keeping these cookies enabled helps us to improve our website.