nOAn~CbIBAEMCEPT~<I>~KAT ~MEIOW.~MCS1 HAPYKAXCEPT~<I>~KATOM
PAYPAL.COM
AllS1 XAKEP.RU
RootCA
Intermediate ot CA
Intermediate
1.J!••••IlIII.
Intermediate Intermediate
Intermediate Leaf [xakep.ru) Leaf (xakep.ru)
H~M 3BEHOM
B UEnO~KE
ETCS1 CEPT~<I>~KAT CAIf1TA
P.RU
_ -
,oT nOCpe,QVl aKTVlBHOM pa60Tbi. n03TOMY
-.ocJ1e Hayalla MITM-aTaKVl HaYVlHaeM - "'" pOBaTb Tpa<pVlK, npOXO,Q~ll.\VlM Yepe3
Leaf [paypal.com) l...(enOYKa cepTV1<pV1KaToB: OT cepTV1<pV1KaTa l.\eHTpa CepT>I<p>lKal\V1V1,Qo cepTV1<pV1KaTa Hawero caMTa
eTC~,
OHa y>Ke ,QOl1ro pa60TaeT
Vl,
eCIlVl Mbl ee npV1
6beM, TO nOA03peHV1M ::lTO, CKopee Beero, He Bb130 BeT. BOT, B 06ll.\eM-TO, i'l Bee ceKpeTbl ycnexa.
--:> -e TporaeM Cookies B TeyeHVle KaKoro
-"..,,>NTKa BpeMeHVl [HanpVlMep, 5MVlHyrl. T\4 "2
--
5MVlHyr, 1'1 3anOMV1HaeM Bce ceccV1V1,
3>1,QellV1 3a ::lTO BpeMR ECIlV1 noclle
~BIl~eTC~ KaKa~-TO HOBa~,
TO nOllyya
1'1 napollV1. Onb/Tbl Mbl 6YAeM npoBo,QV1Tb Ha BV1pTyallbHblx MaWVlHax. VlTaK, y Hac eCTb He60llbwa~ 1l0KallbHa~ ceTb, COCTO~ll.\a~
1'13 MaWV1Hbl >KepTBbl [192.168.1.31. HaweM
~ ~CnbITAEM
MaWVlHbl [192168.1.5) 1'1 MaWVlHbl, clly>Ka
SSLSTRIP B AEJlE
ll.\eM WIl1030M B VlHTepHeT [192.168.1.11
Ho ,QOBOllbHO IlVlpV1KVl. nOCMOTpV1M, peallb
Tenepb nOArOTOBV1M nllal\AapM AIl~ aTaKV1.
HO 111'1 YTall.\V1Tb YbV1-HV16y,Qb 110rVlHbi
B KayeCTBe OC Ha CBoeH MaWV1He 6YAeM V1cnOllb30BaTb nonYIl~pHblM ,QV1CTpV16yTVlB
_
=HHbIH l.\eHTp -'ilKal.\i'li'l
BackTrack3 [Bce TO >Ke caMoe MO>KHO npOAe
RootCA cepnl(pl1KaT
llaTb
Vl
nOA BV1HAOM, nOCTaBV1B Heo6xOAV1Mble
nporpaMMbl 1'1 HaCTpOV1B eV1CTeMY, HO 3ayeM AellaTb IlVlWHIOIO pa6oTy, eCI1V1 KTO-TO y>Ke
- <THbli1 l.\eHTp .1oIKal.\i'li'l
T
1-i1
CepTl1lPl1KaT CA
c,Qellall ee 3a Te6~?1. VlTaK, 3arpy>KaeM CVlCTe npOBepHeMcpOKAeHCTBi'lHCepTI1~I1KaTa.
OH nOAnl1CaH Root CA. Root CA HBl1HeTCH AOBepeHHbIM, Ha nOM npOBepKa 3aKaHYV1 BaeTCH.nOAl1V1HHOCTbcaHTaYCTaHOBl1eHa.
My 1'1 YCTaHaBIlV1BaeM sslstrip:
#bt python setup.py install B npV1Hl\V1ne, MO>KHO Aa>Ke He YCTaHaBI1V1BaTb,
- CTHblH l.\eHTp loIKal.\i'lV1
2-H
CepTl1lPl1KaT CA
npOBepKa cpOKa AeHCTBI1H CepTi'l~I1KaTa. Y3HaeM, YTO CA2 nOAni'lCaH CepTi'l~i'lKa TOM CAl, KOTOpbli1 onHTb >Ke He ~Bl1HeTCH
a 3anycKaTb sslslrip cpa3Y:
#bt python ./sslstrip.py -h
AOBepeHHbIM. npOBep~eM Cl1eAYIOll.\V1i1 cep TV1 <pi'lKaT. YTo6bl Bce 3apa60Ta1l0, HaM Hy>KHO
...
npOBep~eM cpOKAeHCTBV1H CepTi'l~I1KaTa
i'l y3HaeM, YTO OH nOAni'lCaH CepTI1~V1KaTOM CA2. T.K. TOT He HBl1HeTC~ AOBepeHHbIM, nepeXOAi'lM K Cl1eAYIOll.\eMY CepTi'l<pi'lKaTy B l.\enOYKe.
HeMHO>KKO nO,QKOH<pV1rypV1pOBaTb cV1cTeMy. CnepBa BKIlIOYV1M Ha MaWVlHe pe>KV1M nepe HanpaBlleHV1H naKeTOB Iforwarding model. ):(ellaeTc~ 3TO clleAYIOll.\eM KOMaHAoM:
#bt echo "1" > /proc/sys/net/ nporpaMMa.
ipv4/ip_Eorward
npoBeplllOll.\a~
CepTi'llP I1KaT
«npOUEAYPA npOBEPK~ CEPT~<I>~KATOB»
3aTeM HaCTpOV1M iptables ,Q1l~ nepeHanpaBlle HI1~ httP-Tpa<pVlKa:
~
029