Login Register






The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Thread Rating:
  • 0 Vote(s) - 0 Average


Tutorial Network traffic sniffing filter_list
Author
Message
RE: Network traffic sniffing #7
(03-20-2018, 12:31 AM)Nytelife26 Wrote:
(03-19-2018, 11:16 PM)x n Wrote: This is really useful for what the video is showing, which is how to see how games and other stuff on mobile devices work.

It's too bad though that this is highly impractical in terms of "hacking" considering SSL/TLS encrypted traffic (which most juicy data happens to be nowadays) without a way to read it in plaintext is about as useful as lips on a chicken. You still have a few options though, you could use SSLstrip to force the user to use http links which is infeasible because it only works on very outdated browsers, MITMf + sslstrip2 to bypass the HSTS HTTP header which is improbable to work because it only works on pretty outdated browsers or if the user has never visited the website once in that browser, SSLstrip which is a transparent proxy that forges the target website's SSL certificate (minus the fingerprint) which works on anything however newer browsers will display a certificate warning (which will probably work on uneducated or gullible people), or you could install a self-signed certificate on the target device like he does in the video but this obviously won't be happening in a scenario where you're just trying to sniff the traffic of some random person a network.

You have a valid point there.
However, I'll have to respectfully disagree with SSLstrip not working very effectively. Maybe in your experience it isn't very good, but in mine it works pretty damn well for its intention.
I've used SSLstrip numerous times in the past and it has worked almost every time. How has it been for you (that is, if you are basing it on experience)? Failed or do you just find it inefficient?

Have you tried recently? It hasn't really worked in years. There is SSLStrip2/SSLStrip+, however I'm not sure of the state of it currently though.


(11-02-2018, 02:51 AM)Skullmeat Wrote: Ok, there no real practical reason for doing this, but that's never stopped me.

Reply





Messages In This Thread
Network traffic sniffing - by chunky - 03-19-2018, 10:10 PM
RE: Network traffic sniffing - by Synthx - 03-19-2018, 10:43 PM
RE: Network traffic sniffing - by chunky - 03-19-2018, 10:49 PM
RE: Network traffic sniffing - by x n - 03-19-2018, 11:16 PM
RE: Network traffic sniffing - by Nytelife26 - 03-20-2018, 12:31 AM
RE: Network traffic sniffing - by Blink - 03-20-2018, 04:31 AM
RE: Network traffic sniffing - by Nytelife26 - 03-20-2018, 11:34 PM
RE: Network traffic sniffing - by x n - 03-21-2018, 12:12 AM
RE: Network traffic sniffing - by chunky - 03-20-2018, 12:31 AM
RE: Network traffic sniffing - by x n - 03-21-2018, 12:13 AM
RE: Network traffic sniffing - by Bish0pQ - 03-21-2018, 10:14 AM



Users browsing this thread: 1 Guest(s)