Forum Replies Created
- Posts
I can modify but, which one do you recommend me because as you know to install something needs internet connection, so with fake captive protal no internet is there, any idea Diego ?
Dieo I understand it, but what If we want when they click in the fake ap we give them a page so they enter the password and after it we gvie them a page you have to update this network and they click and get the backdoor ?
So as I know fluxion is a program which checks if the entered password on the web is correct then they give access to the itnernet, is that right ?
It works now when I type ilesamples.com/formats/txt, but when I send a email to the target and they click on it so it will be https
I see that I forgot to type –mode transparent. THAT WORKS NOW.
But when i type zsecurity.org that goes to http good, and some other sites, but mozilla.org, and I type sample txt I see this
https://filesamples.com/formats/txt
this is https and doesn’t get downgraded to http, I try all https when needed to downloads something but doesn’t get http.
i don’t type manually https but I go to google .com and type sample txt sample pdf, they get downloads over https.
I also try bing.com they get downloaded over https again.I have ccleared browsing data, it works on http but not on https.
Also when I try to go to google.com and search for anything, it says invalid http request not working.No Diego, still doesn’t work.
ettercap -Tq -M arp:remote -i wlan0 -S /192.168.1.103// /192.168.1.1//
mitmproxy/ iptables -t nat -A PREROUTING -p tcp –destination-port 80 -j REDIRECT –to-port 8080
./mitmdump -s sslstrip.py -s /opt/TrojanFactory/mitmproxy_script.pyNot working.
Yes of course, this is the link that I got from network hacking conntinued that Zaid shared with us.
https://github.com/mitmproxy/mitmproxy/tree/v2.0.2/examples/complexI’ve cleared all the browsing data from the victim, but nothing happened.
Google.com uses hsts, but winzip and zsecurity not.
It’s working for http, I can see data in wireshark, everything okay, but when I run sslstrip everything goes over https.
Everything works with bettercap. I can sniff data from http, I can downgrade https to http, dns spoof and so on.
I am not able to sniff data from http://testphp.vulnweb.com/login.php, and in no http webiste.
I always enable port forward.
