{"id":3103,"date":"2011-07-01T09:49:01","date_gmt":"2011-07-01T08:49:01","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3103"},"modified":"2015-09-09T19:37:11","modified_gmt":"2015-09-09T11:37:11","slug":"sslsniff-v0-7-ssl-man-in-the-middle-mitm-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2011\/07\/sslsniff-v0-7-ssl-man-in-the-middle-mitm-tool\/","title":{"rendered":"sslsniff v0.7 &#8211; SSL Man-In-The-Middle (MITM) Tool"},"content":{"rendered":"<p>It&#8217;s been a while since the last sslsniff release back in August 2009 with version 0.6 &#8211; <a href=\"https:\/\/www.darknet.org.uk\/2009\/08\/sslsniff-v0-6-released-ssl-mitm-tool\/\">sslsniff v0.6 Released \u2013 SSL MITM Tool<\/a>. Version 0.7 was finally released earlier in the year in April &#8211; so here it is.<\/p>\n<p>This tool was originally written to demonstrate and exploit IE&#8217;s vulnerability to a specific &#8220;basicConstraints&#8221; man-in-the-middle attack. While Microsoft has since fixed the vulnerability that allowed leaf certificates to act as signing certificates, this tool is still occasionally useful for other purposes.<\/p>\n<p>It is designed to MITM all SSL connections on a LAN and dynamically generates certs for the domains that are being accessed on the fly. The new certificates are constructed in a certificate chain that is signed by any certificate that you provide. <\/p>\n<p>The three steps to get this running are:<\/p>\n<ul>\n<li>    Download and run sslsniff-0.7.tar.gz<\/li>\n<li>    Setup iptables<\/li>\n<li>    Run arp-spoof <\/li>\n<\/ul>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p><strong>Changes in 0.7<\/strong><\/p>\n<ul>\n<li>    Fixed some networking shuffling bugs (thanks Daniel Roethlisberger)<\/li>\n<li>    Added basic compatibility with BSD pf (thanks Daniel Roethlisberger) <\/li>\n<\/ul>\n<p>You can download sslsniff v0.7 here:<\/p>\n<p><a href=\"http:\/\/www.thoughtcrime.org\/software\/sslsniff\/sslsniff-0.7.tar.gz\">sslsniff-0.7.tar.gz<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/www.thoughtcrime.org\/software\/sslsniff\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It&#8217;s been a while since the last sslsniff release back in August 2009 with version 0.6 &#8211; sslsniff v0.6 Released \u2013 SSL MITM Tool. Version 0.7 was finally released earlier in the year in April &#8211; so here it is. This tool was originally written to demonstrate and exploit IE&#8217;s vulnerability to a specific &#8220;basicConstraints&#8221; [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9,5],"tags":[3746,1201,1198,190,4280],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3103"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3103"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3103\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}