Forum Replies Created
- Posts
One thing, I had to downgrade Twisted to 18.9.0(pip install Twisted==18.9.0) otherwise sslstrip gets an error like the following when you hit an https website:
File “/usr/local/lib/python2.7/dist-packages/twisted/web/http_headers.py”, line 40, in _sanitizeLinearWhitespace
return b’ ‘.join(headerComponent.splitlines())
exceptions.AttributeError: ‘int’ object has no attribute ‘splitlines’I still see some other errors
e.g. Request.write called on a request after Request.finish was called.but it still seems bring up the winzip site correctly via http instead of https
I figured out why there were duplicate packets.
Because I initially couldn’t find a non https download link I was running apache locally on the kali host itself to serve up both the original file as well as the evil replacement file.
This also ended up confusing me when I went to try to target the windows vm as after after running arp spoof I could see all traffic going to/from internet from the windows machine
but couldn’t see any of the requests made from the windows machine to the kali machine itself. In my overly complicated setup I had to add the iptables INPUT/OUTPUT rules as well as the FORWARD rules so I could see traffic directed to the kali host as well.
