Cannot bypass web content filter to perform apt-get

**whyamialwaysbroken** · 2019-12-09

I feel as though i've searched everywhere for an answer but i cannot find one that works.
My Kali box is behind SSL-Inspect, which breaks apt-get because the certificate (of the SSL-Inspect) is not trusted.

I'm simply looking for a way to be able to run apt-get while being MITM.

I have tried adding the following to sources.list:
[trusted=yes]
[allow-insecure=yes]

and i've tried adding the following to /etc/apt/apt.conf.d/
Aquire::https {
Verify-Peer "false";
Verify-Host "false";
}

none of those have worked.

If i use "deb https://http.kali.org/kali kali-rolling main non-free contrib" then i get the following:
"Certificate verification failed: the certificate is NOT trusted"

If i use "deb http://http.kali.org/kali kali-rolling main non-free contrib" then i get the following:
"Could not connect to kali.download:80 - connection refused"

Does anyone know how to bypass these checks for apt-get?

**Mister_X** · 2019-12-17

What is the filename (exact) in which you put that Acquire::https?

**jonasl** · 2019-12-17

Connecting to http.kali.org on port 80 seems to work for me:

Code:

➜  ~ curl -v http://kali.download:80
*   Trying 104.18.102.100...
* TCP_NODELAY set
* Connected to kali.download (104.18.102.100) port 80 (#0)
> GET / HTTP/1.1
> Host: kali.download
> User-Agent: curl/7.64.1
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Tue, 17 Dec 2019 15:56:15 GMT
< Content-Type: text/html
< Transfer-Encoding: chunked
< Connection: keep-alive
< Set-Cookie: __cfduid=dcc61acb424bcd9410604f5a21f69f19f1576598175; expires=Thu, 16-Jan-20 15:56:15 GMT; path=/; domain=.kali.download; HttpOnly; SameSite=Lax
< Expires: Tue, 17 Dec 2019 19:56:15 GMT
< Cache-Control: public, max-age=14400
< CF-Cache-Status: MISS
< Server: cloudflare
< CF-RAY: 546a16033f7ecb00-ARN
<
<html>
<head><title>Index of /</title></head>
<body bgcolor="white">
<h1>Index of /</h1><hr><pre><a href="../">../</a>
<a href="kali/">kali/</a>                                              17-Dec-2019 12:05                   -
<a href="kali-images/">kali-images/</a>                                       15-Dec-2019 02:07                   -
</pre><hr></body>
</html>
* Connection #0 to host kali.download left intact
* Closing connection 0

**whyamialwaysbroken** · 2019-12-17

the names i've used for that file are:
99ssl
01ssl
88ssl

Any recommendations on what it should be?

Thread: Cannot bypass web content filter to perform apt-get

Thread Tools

Search Thread

Display

Cannot bypass web content filter to perform apt-get

Similar Threads

[HowTo]Perform a Scan Task on OpenVAS

DOM based XSS filter bypass checker

Wash ERROR: Failed to compile packet filter

Posting Permissions