Member-only story

Mastering SSLStrip Analysis: Uncovering Hidden Vulnerabilities

bob218
3 min readOct 15, 2023

--

of bob218

Image of bob218

What is SSL (secure socket layer)? Secure Socket Layer (SSL) analysis is a standard security technology used to establish an encrypted channel between a server and a client. For example, a web server (website) and a browser; or a mail server and a mail client.

SSL enables the secure transmission of sensitive information such as credit card numbers, social security numbers, and login credentials. Normally, data sent between browser and Web server is sent in plain text, making you vulnerable to eavesdropping. If a malicious user is able to intercept (capture) all data sent over the Internet between a browser and a Web server, they can see and use that information. Http is sent to data in plain text over a network. The HTTPS protocol is used to establish a secure channel between the browser (client) and the Web server.

More specifically, SSL is a security protocol. Protocols describe how algorithms are to be used; in this case, SSL determines the variables of encryption for both the connection and the transmitted data.

What SSLstrip? SSLstrip is a tool used to downgrade HTTPS to HTTP. It will transparently hijack HTTP traffic on a network, watch for HTTPS links and redirects, and then map those links into either look-alike HTTP links or homograph-similar…

--

--

bob218
bob218

No responses yet