sslstrip

Downgrade HTTPS to HTTP in a MITM.

KaliParrotLinuxhigh

pkg: sslstrip

sslstrip rewrites HTTPS links to HTTP during a MITM to capture credentials (defeated by HSTS).

Syntax

sslstrip -l {port}

sslstrip -l 8080

Strips TLS from proxied traffic to read it in clear (legacy targets).

What each switch does. Toggle them in the builder below to assemble a command.

`-l` <8080>	Listen port (pair with an iptables redirect).
`-w` <log.txt>	Write captured data to a file.
`-a`	Log all SSL and HTTP traffic.

Tick options (and fill any values) to build a ready-to-copy command.

sslstrip

-lListen port (pair with an iptables redirect).-wWrite captured data to a file.-aLog all SSL and HTTP traffic.

sslstrip -l 8080 -w log.txt

Strip TLS during a MITM and log traffic.

Advantages

Disadvantages

What is sslstrip used for?

sslstrip rewrites HTTPS links to HTTP during a MITM to capture credentials (defeated by HSTS).

What is an example sslstrip command?

A common example is: sslstrip -l 8080 — Strips TLS from proxied traffic to read it in clear (legacy targets).

Is sslstrip part of Kali Linux?

Yes. sslstrip ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install sslstrip.

What category of security tool is sslstrip?

sslstrip is a Sniffing & Spoofing tool with a high-risk profile when run against a live target.

Run real scans against a domain you control, stage by stage.