Man in the Middle Hacking Fun with SSL Strip

This time on the show Darren's having a little man-in-the-middle fun with a demonstration os SSLStrip, an epic tool for removing that pesky encryption from your victims browsing session. Plus Laser Cat Modding

Moxie Marlinspike's SSLStrip, released at Blackhat/DEFCON this year, is a tool that transparently hijacks HTTP traffic and redirects HTTPS links to look-alike HTTP links. While this description barely scratches the surface, Darren's segment takes a closer look including a pracitcal demonstration of a man-in-the-middle attack using arpspoof and a little luck with remote-exploit's BackTrack 4 penetration testing distribution.

Category:

• Science & Tech
• Learning & Education

Tags:

• hack
• hacking
• interceptor
• eavesdrop
• network
• monkey
• sysadmin
• hak5
• ssl
• hacker
• jasager
• wifi
• pineapple
• man
• in

[wEBOTLPOPN]

soco + packets = score

[Hak5Darren]

mmmmmm packets

[optimaloptimusprimus]

LOL DArren your SExy and you crack me up - OOP

[Hak5Darren]

damn skippy

[n00oob]

Win, I just learned a new word for less than/greater than.. Wakka.. :)

[Hak5Darren]

wakka wakka wakka wakka *power pellet sound*

[madichelp0]

Darren is a pretty cool guy. He has drinks in his hair and doesn't afraid of anything.

[TobiasBoon1980]

11:23 Haha what?

[OrionHumphrey]

Whenever I am arp spoofing it kills my internet on the target machine. (Not sure about other machines) How do I fix this.

[TT1TTOne]

Can anyone please tell if Ettercap is a legit (=safe) tool for pentesting? Would it be possible to cause any harm with it beyond your knowledge, like spreading viruses or worms in a otherwise "clean" environment?

In other words, is it itself a safe/clean application to use professionally?

I am referring to normal usage, without implementing any harmful code myself, where it only works as a sniffer.

[bombdiggity50]

best hack tools at SOFTWAREFORYOU(dot)TK

[reubenthorpe1992]

@theoriginalfatdonkey fuck you i love it when they talkz



[Twarchie]

0:00

[TheRemixedPancake]

@acdcgreatestbandever Well it's not really a downside. It isn't that hard the connect to protected wifi, because you can crack WPA and WEP passwords. Also a Man-in-the-Middle attacks would be smarter by manually sniffing out the info rather than a Trojan, because most people are smart enough to have an antivirus, so it would be detected easily.

[krazednconfused]

i couldn't help but notice your shirt.

i happen to like LDAP! but, you know. openldap's implementation.

[icemanbx]

Holy fuck, SKIP ALL THAT BULLSHIT AT THE START. Like, the first 7 minutes. Thanks.