Reply
Thread Tools
gibman is offline gibman
2012-12-26 , 21:45
Posts: 44 | Thanked: 9 times | Joined on Dec 2012
#1
I have Yamas on my N900 and ready to do an SSLstrip sniff on my home network to see if Yamas can capture plain text https credentials. I open port 8080 to 80 and set IP to 192.168.0.1)router). I go into my laptop and login into FB. SSlstrip just displays this on Xterm.

www.facebook
login:0056712453667687
login:0056712453667687

I see no plain text username/password. Do I need to add any other services or applications to Yamas?
 
Wreck's Avatar
Wreck is offline Wreck
2012-12-26 , 22:25
Posts: 304 | Thanked: 266 times | Joined on Apr 2011 @ Apeldoorn area, Netherlands
#2
Well Facebook log-in is always hashed. I only tested this once trying to see the log-in on my own non hashed log-in website.

Never tried Facebook to be honest. Since https is impossible(I am a real noob at this so don't take this as a fact)
Last edited by Wreck; 2012-12-27 at 11:53.
 
Reply

« Previous Thread | Next Thread »
Thread Tools

 
Forum Jump


All times are GMT. The time now is 05:26.

Contact Us - Home - Archive - Top