[Xyrcode]

If I would've walked into Starbucks, and fired up SSLSTRIP, would I still be able to sniff on an IP on the network? Unless they have a VPN..

If SSLSTRIP works, then I guess Evil Twin works...

[Dismas]

Not entirely sure if it still works, to be honest.

[Xyrcode]

Alright, just did some more research onto the topic, it seems to work on all sites except Gmail and Twitter because they use HSTS headers, which GOOGLE and FIREFOX supports, which makes it not vulnerable anymore for those sites, however, if the user uses Safari, it would work.

SOURCE:
https://www.owasp.org/index.php/HTTP_Str...t_Security
And...
https://forums.hak5.org/index.php?/topic...l-twitter/

[Hu3c0]

I don't think so, we've got sslstrip2 and dns2proxy.py and the brrowser you mentioned are vulnerably ("Firefox && Chrome")

[MY0SEE]

Nowdays, doesn't work sslstrip so HSTS but you can use MITMF for break this.
https://github.com/byt3bl33d3r/MITMf
http://i.imgur.com/nmBhLHB.png

[general_lee]

Hy
Googling fot hsts hack i found you guys.
Dos anyone have this program for hsts? I saw it on yt:
https://www.youtube.com/watch?v=m-o-UPBLqvU

Thanks