sslstrip

sslstrip is a MITM tool that implements Moxie Marlinspike’s SSL stripping attacks.

It requires Python 2.5 or newer, along with the ‘twisted’ python module.

Installing:

  • Unpack: tar zxvf sslstrip-0.5.tar.gz
  • Install twisted: sudo apt-get install python-twisted-web
  • (Optionally) run ‘python setup.py install’ as root to install, or you can just run it out of the directory.

Running:

sslstrip can be run from the source base without installation. Just run ‘python sslstrip.py -h’ as a non-root user to get the command-line options.

[crayon-6a61b0f4f056c126275365/]

More Info:

http://www.thoughtcrime.org/software/sslstrip/