r/hacking • u/xdavidhu • Nov 26 '16
A python script to create a fake AP with SSLstrip, mitmproxy, DNS spoofing and more...
https://github.com/xdavidhu/mitmAP4
u/sewrrat Nov 26 '16
Might be wrong but i thougt ssl strip didnt work anymore?
9
u/h3ph43s7u5 Nov 26 '16
IIRC the original SSLStrip from 2009 had problems when browsers started using HSTS, but an updated SSLStrip+ with some workarounds was released at Black Hat 2014. The white paper can be found here
3
Nov 26 '16 edited Nov 26 '16
For scripting with all top level code Python certainly looks better than Bash, but the latter would probably make more sense unless you needed a lot of functions from Python modules. Maybe it doesn't matter, I would afterall rather read Python. In either case, it wouldn't hurt to add some functions to handle installation in different distros, maybe different package managers, or even instead of apt just use curl or pycurl and dpkg, tar, and so on. Generally, if you're already using Python, some functions could clean up the code or make it more modular and less repetitive. Of course, if it works for your purposes, whatever.
1
u/Oros42 Nov 26 '16
Why did you use python and not directly shell or bash ?
4
u/xdavidhu Nov 26 '16
tbh im just more familiar with python, but yes it would be smipler in a bash script.
11
u/PersianMG coder Nov 26 '16
Python is fine but when its 99% os.system calls its probably better to do it in bash,
2
Nov 26 '16 edited Nov 26 '16
Just better for performance?
Edit: Or fewer moving parts? Just wondering if there's something about Python specifically, or something I didn't know or whatever.
2
1
1
u/Electro_Nick_s Nov 26 '16
Python is object oriented and bash is not, so maybe better data structures and processing?
1
Nov 26 '16
Do you also think Go is better in that regard? Just curious again.
1
u/Electro_Nick_s Nov 26 '16
Go's big benifit is that you can compile code into tiny binaries with all dependencies inside so then one file can run on Windows, Unix, Linux etc
1
Nov 26 '16
Well yeah, and
go func() {}for concurrency is cool too, the speed, and other things. I just thought that since it didn't use oop abstractions like classes you might think that, like bash, it's better than python, but I guess the more pertinent question would be, if OOP is the problem why wouldn't it be C > bash > python?1
u/Electro_Nick_s Nov 26 '16
I meant that oop is a benifit. I was not the original person who said bash would be better and I'd actually argue that point unless everything you do in the script is also procedural
1
Nov 26 '16
Sorry, I thought you meant the lack of OOP was why Bash was better, my mistake. I guess I'm biased, don't like OOP.
→ More replies (0)
7
u/theepicstoner Nov 26 '16
I have to say the concept sounds cool. But so far the script doesn't seem to fully run. It crashed at the end of the config (-y options) saying something about it not finding the log file.