How can I bypass the HSTS protection with SSLstrip2 + DNS2proxy?

Question

What are the steps that I can follow to bypass HSTS protection? My basic understanding of the SSLstrip2 came from a blog which contained the following paragraph - This tool provides a demonstration of the HTTPS stripping attacks that I presented at Black Hat DC 2009. It will transparently hijack HTTP traffic on a network, watch for HTTPS links and redirects, then map those links into either look-alike HTTP links or homograph-similar HTTPS links. It also supports modes for supplying a favicon which looks like a lock icon, selective logging, and session denial.

Anisha Dalal · Accepted Answer

To answer the original question - most people never type https://example.com directly. They rely either on links (click here to access our secure login server) or on redirects (type "gmail.com" in the browser, and you will be automatically redirected to a secure site).This is where SSLStrip comes in: it intercepts the original, unsecured HTTP reply, and replaces ; links with HTTP (insecure) versions. Also, it changes redirects ("Location:" headers) that point to HTTPS URLs. With SSLStrip2, this goes a bit further (intercept, redirect to an invalid subdomain, use DNS interception to actually provide a valid IP for that subdomain).

How can I bypass the HSTS protection with SSLstrip2 + DNS2proxy?

About this question

Your answer

1 Answer

More SQL Server discussions

Learn & Explore

SQL Server Tutorials

SQL Server Interview Q&A

Latest SQL Server Blogs

Want answers to more SQL Server questions?

Stay in the loop — it’s free

You’re on the list!