Hello everyone. Welcome back. I want to talk about mythology back
into this category on SSL strip as
the name, suggests that a curve is going to strip off his
of connection, using Madam will attack. Now
what the reason attacker is trying to do
is because whenever we use SSL protocol over any
of the existing such as FTP or HTTP to
latch again grip.
Jump in and using that the backup will
not be able to hijack. Essential information, or
any other data that is willing to understand. So
the title is going to ensure that
if he has able to download this
is the protocol itself, then you can downgrade it to
http and using that we'll be able to sniff
sniff it.
Now, one of the primary ways would be to
use now, spoofing, this is because we need to ensure that
all the traffic is being diverted to that account machine only.
It was a proxy. So once we use a
proxy server, all the traffic would be reordered to
the same foxy, 12 server, and we can terminate the salon that
instance as well and read the
data in plain text.
And one of the last would be back open by Faust,
hot spots. The user connects and is not aware that
to traffic is being routed. And everything is being
sent in plain text.
Now what the tool that are going to show today is
known as petrol cap.
I'm going to assign one of the two places where we are
going to strip the traffic this scenario. It would be, it
is 0.
Now, let's look at basic commands.
These are the multiple modules that we need to enable
before snapping the traffic. So
let's start with setting up.
This is a strip.
So the next would be questionable the
network capture as well.
Now, let's perform some up
spoofing.
- we see that are all
the traffic is being cut. Listen, if you're using this tool, so,
one of the demerits of using this attack
include is scenario, is because not every possible, development
of the strong gradient, and the same time,
if the users are using any cached URLs
to that would not be downgraded. The
same time if there are strong hsts signatures
set up better than close the
browser window, too.
Direct to any SSL encrypted traffic
only and it will check the domain and soon. So
this particular type will not be foolproof
given to multiple complications on
the browser. So that scenario would be when the user is
trying to access an HTTP URL. That article is
quid to spoof. All the traffic towards himself. Such
that he is able to strip out the
surroundings, local machine, and the same data is for to
the router and again, back to the server. So that way the combination is
Big tin through the tackle in self and
this is subscribe would control that the
connection is terminated method while he reads the data
in plain text.
That's it for this video. Thank you.