sslstrip包装说明
sslstrip是透明劫持HTTP流量的网络上,观看了HTTPS链接和重定向,然后映射那些链接到外观类似HTTP链接或同形词,类似的HTTPS连接的工具。它还支持模式提供一个图标看起来像锁图标,选择性伐木和会话拒绝。
资料来源:http://www.thoughtcrime.org/software/sslstrip/
sslstrip首页 | 卡利sslstrip回购
- 作者:莫邪Marlinspike
- 许可:GPLv3的
包含在sslstrip包工具
sslstrip - SSL / TLS中间人攻击的工具
[email protected]:~# sslstrip -h
sslstrip 0.9 by Moxie Marlinspike
Usage: sslstrip <options>
Options:
-w <filename>, --write=<filename> Specify file to log to (optional).
-p , --post Log only SSL POSTs. (default)
-s , --ssl Log all SSL traffic to and from server.
-a , --all Log all SSL and HTTP traffic to and from server.
-l <port>, --listen=<port> Port to listen on (default 10000).
-f , --favicon Substitute a lock favicon on secure requests.
-k , --killsessions Kill sessions in progress.
-h Print this help message.
sslstrip用法示例
结果写入一个文件(-w sslstrip.log),监听端口8080(-l 8080):
[email protected]:~# sslstrip -w sslstrip.log -l 8080
sslstrip 0.9 by Moxie Marlinspike running...