moxie0/sslstrip
View on GitHub ↗ ★ 2,081 Python
A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
5 mentions on Hacker News by 5 people: 0 stories, 5 comments · first 2013-11-09 · latest 2022-05-06
20082026
-
…just strip the upgrade to https anyway. Lots of those sort of tricks are implemented in sslstrip: https://github.com/moxie0/sslstrip
comment by pabs3 · 2022-05-06 · in How to build an absurdly backwards-compatible website -
…(and perhaps pioneered?) by Moxie Marlinspike of Signal with his tool sslstrip back in 2011: https://github.com/moxie0/sslstrip . I believe that's what he was most famous for before Signal. It's unfortunate that this very simple attack…
comment by meowface · 2021-05-11 · in Tracking One Year of Malicious Tor Exit Relay Activities (Part II) -
…to MITM by using Moxie Marlinspike’s sslstrip tool[2]. [1] https://youtu.be/Oh4WURZoR98 [2] https://github.com/moxie0/sslstrip
comment by cpach · 2017-10-16 · in Key Reinstallation Attacks – Breaking WPA2 by Forcing Nonce Reuse -
…to the user relative to an insecure connection. Granted this opens up attacks like ssl stripping, https://github.com/moxie0/sslstrip , but certificate pinning is making that more difficult.
comment by blueplanet200 · 2016-09-02 · in Chrome is warning users about insecure pages -
…machines https request dynamically. While not breaking SSL it is effective on a non observant user. https://github.com/moxie0/sslstrip
comment by posnet · 2013-11-09 · in Lans.py: capture usernames, passwords, messages and inject arbitrary HTML