Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #31482
    AvatarDege Ratak
    Spectator

    FYI, the new Kali2020 vm provided didn’t have sslstrip installed.
    To install I had to do download and unzip/untar sslstrip from https://moxie.org/software/sslstrip/ and follow the install instructions.
    running sslstrip then failed due to missing twisted-web module.
    to fix had to do
    pip install Twisted.
    sslstrip then runs but warns about missing the service_identity module.
    which you can fix by installing via
    pip install service_identity

    #31484
    AvatarDege Ratak
    Spectator

    One thing, I had to downgrade Twisted to 18.9.0(pip install Twisted==18.9.0) otherwise sslstrip gets an error like the following when you hit an https website:
    File “/usr/local/lib/python2.7/dist-packages/twisted/web/http_headers.py”, line 40, in _sanitizeLinearWhitespace
    return b’ ‘.join(headerComponent.splitlines())
    exceptions.AttributeError: ‘int’ object has no attribute ‘splitlines’

    I still see some other errors
    e.g. Request.write called on a request after Request.finish was called.

    but it still seems bring up the winzip site correctly via http instead of https

    #31510
    AvatarA J
    Moderator

    Hi Dege,

    Yes, this is true, you’re not the only one that you get these errors when you try the downgrade, but it will work if you followed everything correctly as shown in the lecture, so if it’s downgrading winzip.com from HTTPS to HTTP, then you can ignore the error message that you get and proceed normally with the course.

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.