sensepost
SSLstrip dosen't remove https
i've installed mana toolkit since a while now, and till this i wasn't able to sslstrip any of https websites, i've tried to look up articles from everywhere, but nothing.
i'll appreciate any help
Can you post more information? Which website, which mana configuration? One thing to note, is that it will only work on sites which don't already have an HSTS entry e.g. if you go to encrypted.google.com it won't work, but if you go to another google site where the initial connection is HTTP it will.
if you type https in your browser manually then sslstrip will not work , because https will establish the handshake and encryption
Yes. sslstrip prevents upgrades to SSL but can’t downgrade once its established.
Also, mana toolkit is deprecated. Please see https://w1f1.net for the latest tools.
On 07 Nov 2018, at 17:44, Fahad Alrahbi [email protected] wrote:
if you type https in your browser manually then sslstrip will not work , because https will establish the handshake and encryption
— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.