sslstrip
sslstrip copied to clipboard
A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
I needed a proxy to inject code into HTML pages returned from a server before sending them back to the client. I started out writing my own then gave up...
I've added simple, extensible functionality to tamper with server responses before they are sent to client. It's optional, you can have your own classes implementing the tapering and configure them...
What Linux distro can this be run on (easily)? I tried on Fedora 20 -- but it has firewalld rather than iptables, and a very different Python version than expected....
Hi there! While using sslstrip, I encountered a rather small but crucial issue of infinite redirections. Some links get redirected to "http://www.evil.com" while others might redirect to "http://www.evil.com/". A small...
sslstrip 0.9 by Moxie Marlinspike running... Traceback (most recent call last): File "/usr/lib/python2.5/site-packages/twisted/python/log.py", line 48, in cal lWithLogger return callWithContext({"system": lp}, func, _args, *_kw) File "/usr/lib/python2.5/site-packages/twisted/python/log.py", line 33, in cal...
I was pulling my hair trying to figure out why sslstrip wasn't striping even though I was spoofing. After trying for a while I started getting these when loading new...
Hi, guys at [BackTrack forums](http://www.backtrack-linux.org/forums/backtrack-5-general-topics/40683-script-sniffing-traffic-5.html) pointed out that since sslstrip 0.9 there is present bug which causes that pages sometimes does not load at first try. It throws different errors...
link: http://www.thoughtcrime.org/software/sslstrip/ seems to be broken cannot access webpage