DSploit
This is what we have under the MITM submenu:
Password sniffing
Session hijack
Redirect traffic
This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.Replace images, videos
I think this is just for fun here. Endless Rick Rolling possibilities.Script injection
This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.Custom filter
If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).Additional fun (not in DSploit) - SSLStrip
From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.HTML source on the client-side without SSLstrip:
HTML source on the client-side with SSL strip:
With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.
Lessons learned here
If you are a website operator where you allow your users to login, always:- Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
- Mark the session cookies with the secure flag
- Use HSTS to prevent SSLStrip attacks
- Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
- Use HTTPS everywhere plugin
- For improved security, use VPN
And last but not least, if you like the DSploit project, don't forget to donate them!
More articles
- Hacker Security Tools
- Hacking App
- How To Make Hacking Tools
- Pentest Tools Nmap
- Hacking Tools Name
- New Hacker Tools
- Tools Used For Hacking
- Hack Tools For Pc
- Pentest Tools For Windows
- Android Hack Tools Github
- Hacking Tools For Windows Free Download
- Free Pentest Tools For Windows
- Black Hat Hacker Tools
- Pentest Tools For Ubuntu
- How To Hack
- Hacker Tools Free Download
- Android Hack Tools Github
- Bluetooth Hacking Tools Kali
- Tools Used For Hacking
- Hacking Apps
- Hacking Tools For Kali Linux
- Beginner Hacker Tools
- Pentest Tools Website Vulnerability
- Usb Pentest Tools
- Hacker Tools Apk
- Hacking Tools Kit
- Best Hacking Tools 2020
- Hack Website Online Tool
- Pentest Tools Tcp Port Scanner
- Kik Hack Tools
- Beginner Hacker Tools
- Hack Tools
- Easy Hack Tools
- Hacker
- Hack Apps
- Hack Tool Apk No Root
- Pentest Tools List
- Hacking Apps
- Pentest Tools Linux
- Hacking Tools For Mac
- Hacking Tools For Beginners
- Hack Tools 2019
- Hacker Tools For Mac
- Pentest Tools Review
- Hacking Tools Windows 10
- Hacker Tools 2019
- How To Install Pentest Tools In Ubuntu
- Hacking App
- Termux Hacking Tools 2019
- Hacker Tools Free Download
- Pentest Tools Nmap
- Pentest Tools
- Best Pentesting Tools 2018
- Pentest Tools Apk
- Hacker Tools List
- Hacker Tools 2019
- Hacker Tools Software
- New Hacker Tools
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Online
- Pentest Tools Tcp Port Scanner
- Pentest Tools Free
- Hacker Tool Kit
- Hack Rom Tools
- Pentest Tools Find Subdomains
- Physical Pentest Tools
- Bluetooth Hacking Tools Kali
- Hacking Tools 2020
- Hacking Tools For Mac
- Hack Tools For Mac
- Hacker Tools Hardware
- Hack Tools 2019
- Pentest Tools Framework
- Hacker Tools Windows
- Hacking Tools For Kali Linux
- Black Hat Hacker Tools
- What Are Hacking Tools
- Pentest Recon Tools
- Hack And Tools
- Hacker Tools For Windows
- Hacker Search Tools
- Pentest Recon Tools
- Hacking Tools Usb
- Hacker Tools For Pc
- Pentest Tools Url Fuzzer
- Hack Tools Github
- Bluetooth Hacking Tools Kali
- Hacker Tool Kit
- Pentest Recon Tools
- Hacking Tools Windows 10
- Hack Tools 2019
- Pentest Tools For Mac
- Hacker
- Hacking Tools Windows 10
- Pentest Tools Find Subdomains
- Hacking Tools Pc
- Hacking Tools Software
- Hacking Tools For Windows Free Download
- Hackrf Tools
- Hacking Tools For Pc
- Hacker Tools Apk
- Hack Tools 2019
- Hack Tools Mac
- Pentest Tools Subdomain
- Hacker Tools Online
- Hack App
- Hack Tools For Ubuntu
- Hacking Apps
- What Are Hacking Tools
- Hacking Tools For Kali Linux
- Hacking Tools Kit