Hands-On Penetration Testing with Kali NetHunter

Exercise – working with SSL strip

To get things ready for SSL strip, we need to set a few things up ahead of time—fortunately, we already have the skills to do so. We are going to set up the following:

• IP forwarding
• IP table for redirect 80 to 8080
• Finding a gateway IP
• Finding a target IP
• Arpspoof

The following steps should be performed to set up IP forwarding:

1. Type the following at the Terminal window:

echo '1' > /proc/sys/net/ipv4/IP_forward 

2. Set up a redirect to redirect requests from port 80 to 8080. From the Terminal window, issue the following command:

 iptables -t nat -A PREROUTING -p tcp -destination-port 80 -j REDIRECT 
-to-port 8080 

3. Discover the router IP by typing the following at the Terminal window:

netstat -nr 

4. Choose ...