A recipe for preventing the damage caused by SSLtrip

SSL is a secure protocol that provides security and data integrity for network communications. TLS and SSL encrypt the network connection at the transport layer. Developed for Netscape to secure data transmission over the Internet, but recently new types of attack tools have appeared, seriously affecting the security of sensitive information such as user identity protected by SSL/HTTPS. Today's targeted SSLtrip research, the anti-SSLtrip attack solution to prevent the damage caused by SSLtrip.

How SSLtrip works

1. First, the SSLtrip attacker needs to enable its own route forwarding function;

2. Then it broadcasts ARP packets to the network for ARP. Deceive, impersonate the routing or the MAC address of the gateway. So that all the data in the network will pass through this attacker;

3. Replace the https connection in all http data passing through it, and record which connections are replaced;

4. The attacker establishes a connection with the client computer via http. This link will be redirected to another port on the attacker;

5. The attacker then pretends to be a client to establish a https connection with the real server;

6. Such a client and server All data connections between them are transparently forwarded by the attacker. For the client, it is the server, and for the server it is the client.

The figure below shows which https connections are replaced with normal http connections in the ssltrip attack.

7. In order to deceive the client user, all the icons in the browser will be replaced with the https icon;

8. At this time, the user name and password submitted by the client are It is sent in clear text to the ssltrip attacker's computer. The attacker steals the private information of the client without the client's knowledge.

Introduction to Attack Tools

1. Version 0.2

2. Operating Environment Linux

3. Need to enable system routing and forwarding function

4. Need to enable firewall port redirection function Previous page12Next page Total 2 pages