Perl Script for SSLStrip MITM Attack

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUbrddN25dPBr1bGVnAukjjvs3Njxufs1kfnDa9cGVbDXhPtPZP6S1c3PZ0yG943GIw35u2Yfdnyr4gBLTOtrJs_Rxpg1MeiPBnCPOmo1mWXT_zbRDzl9CaiCPyF7GWS_CW4hhppHKyP40/s1600/ssl+strip.jpg" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUbrddN25dPBr1bGVnAukjjvs3Njxufs1kfnDa9cGVbDXhPtPZP6S1c3PZ0yG943GIw35u2Yfdnyr4gBLTOtrJs_Rxpg1MeiPBnCPOmo1mWXT_zbRDzl9CaiCPyF7GWS_CW4hhppHKyP40/s640/ssl+strip.jpg" width="640" /></a></div> <br /> <div style="margin: 0px; padding: 0px;"> I've been using SSLStrip MITM attack a lot recently and decided I am just sick of having to manually configure it so I decided to write a perl script to mostly do it for me or atleast consolidate it in 1 spot. Let me know what you guys think. If anyone notices any bugs let me know so that I can correct them, I've spent the last 2-3hrs testing so it's pretty good from what I can see right now. Nmap option is also included.<br /> <br /> This is not a tutorial of how to do it, that is posted in another location in the intern0t forums.<br /> <br /> Here are the things that are required for this script:<br /> Linux (tested in Ubuntu & Backtrack 4 R2)<br /> Ettercap (specifically etter.conf)<br /> X-term (used b/c Ubuntu & BT4 both have it)<br /> Arpspoof<br /> SSLStrip<br /> Nmap<br /> <br /> **********Start of Disclaimer***********<br /> <div style="text-align: left;"> I'm not responsible for anything illegal or mischievous that you decide to use this for blah, blah, blah...</div> Don't blame me, I didn't force you to use it.<br /> **********End of Disclaimer************<br /> <br /> <div style="text-align: left;"> Code: <a href="http://www.thoughtcrime.org/software/sslstrip/sslstrip-0.9.tar.gz" target="_blank">Download Here.</a></div> <br /> <br /> Hope this helps everyone, let me know if you have any suggestions. Thanks.<br /> <span style="color: red;">Note:</span> <a href="http://it-2on3.blogspot.com/2011/01/sslstrip-tutorial.html" target="_blank">For further reading.</a><br /> <br /> </div> </div>

Hacking Hacking Tutorials Linux Tutorials MITM Networking Tutorials Perl Script for SSLStrip MITM Attack

I've been using SSLStrip MITM attack a lot recently and decided I am just sick of having to manually configure it so I decided to w...

Read more »

IP Spoofing Explained

<div dir="ltr" style="text-align: left;" trbidi="on"> What is IP Spoofing?<div align="justify"> <span style="text-align: left;">An IP (Internet Protocol) address is the address that reveals the identity of your Internet service provider and your personal Internet connection. The address can be viewed during Internet browsing and in all of your correspondences that you send.</span></div> <div align="justify"> <span style="font-size: small;"> </span></div> <div align="justify" class="separator" style="clear: both; text-align: center;"> <a href="https://picasaweb.google.com/101747216663649620199/RapidActionHackers?authkey=Gv1sRgCK_Nx_nl_6mghAE#5579752714616611250" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4bx_rdDXOYOq5PXy4VdbN3rj-mYIpAWfYlJkE-6gVfmXoHYKOSO7JNzayDxXXx16Nu0perfGGlal0urigPHCXTMP96GlozPBZYcWZe50FnGenW2_ieewQGE6NN5_M8YUq4U8weP78Pb6t/s1600/ipsoof1.jpg" /></a></div> <div align="justify"> <span style="font-size: small;"> </span><span style="font-size: small;"> </span><span style="font-size: small;">     </span><span style="font-size: small;"><br /> </span><span style="font-size: small;">                                                                             </span><span style="font-size: small;"><br /> </span><span style="font-size: small;"> </span><span style="font-size: small;"><br /> </span><span style="font-size: small;"> </span><span style="font-size: small;"> </span></div> <div align="justify"> <span style="font-size: small;"> IP spoofing hides</span><br /> <span style="font-size: small;">your IP address by creating IP packets that contain bogus IP addresses in an effort to impersonate other connections and hide your identity when you send information. IP spoofing is a common method that is used by spammers and scammers to mislead others on the origin of the information they send.</span></div> <div align="justify"> <span style="font-size: small;"><br /> </span></div> <div align="justify" style="color: white;"> <span style="font-size: small;"> How IP Spoofing Works</span></div> <div align="justify"> <span style="font-size: small;"> The Internet Protocol or IP is used for sending and receiving data over the Internet and computers that are connected to a network. Each packet of information that is sent is identified by the IP address which reveals the source of the information.</span></div> <div align="justify"> <span style="font-size: small;"> When IP spoofing has used the information that is revealed on the source of the data is not the real source of the information. Instead, the source contains a bogus IP address that makes the information packet look like it was sent by the person with that IP address. If you try to respond to the information, it will be sent to a bogus IP  address unless the hacker decides to redirect the information to a real IP address.</span></div> <div align="justify"> <span style="font-size: small;"><br /> </span></div> <div align="justify" style="color: white;"> <span style="font-size: small;"> Why IP Spoofing is Used</span></div> <div align="justify"> <span style="font-size: small;"> IP spoofing is used to commit criminal activity online and to breach </span><a href="http://www.spamlaws.com/network-security.html" title="Network Security"><span style="font-size: small;">network security</span></a><span style="font-size: small;">. Hackers use IP spoofing so they do not get caught spamming and to perpetrate denial of service attacks. These are attacks that involve massive amounts of information being sent to computers over a network in an effort to crash the entire network. </span><span style="font-size: small;">The hacker does not get caught because the origin of the messages cannot be determined due to the bogus IP address.</span><span style="font-size: small;">IP spoofing is also used by hackers to breach </span><a href="http://www.spamlaws.com/network-security.html" title="Network Security"><span style="font-size: small;">network security</span></a><span style="font-size: small;"> measures by using a bogus IP address that mirrors one of the addresses on the network. This eliminates the need for the hacker to provide a username and password to log onto the network.</span></div> <div align="justify"> <span style="font-size: small;"><br /> </span></div> <div align="justify"> <span style="font-size: small;">IP Spoofing Protection</span><span style="font-size: small;"><br /> </span><span style="font-size: small;"><br /> </span><span style="font-size: small;"> It is possible to protect a network against IP spoofing by using Ingress filtering which uses packets to filter the inbound traffic. The system has the capability to determine if the packets are coming from within the system or from an outside source.</span><br /> </div> </div>

Networking Tutorials IP Spoofing Explained

What is IP Spoofing? An IP (Internet Protocol) address is the address that reveals the identity of your Internet service provider and your...

Read more »