Hijacking Web 2.0 Sites with SSLstrip
Sam Bowne explores hijacking web 2.0 sites with sslstrip at DEF CON 17, examining nation-state-actors and practical defenses.
Summary
Architecture and Background
Hijacking Web 2.0 Sites with SSLstrip--Hands-on Training Sam Bowne Instructor, City College San Francisco, Computer Networking and Information Technology Department Many Websites mix secure and insecure content on the same page, like Facebook. This makes it possible to steal all the data entered on such a page easily, using Moxie Marlinspike's new SSLstrip tool. First I will give a brief explanation and demonstration of the technique, and then I will help audience members set up the attack themselves on their own laptops.
Vulnerability Analysis
Detailed instructions and all required software will be provided. Audience members should bring a laptop computer to participate in the hands-on training. Sam Bowne has been teaching computer networking and security classes at CCSF since 2000.
Exploitation and Demonstrations
He has given talks at DEFCON and Toorcon on Ethical Hacking, and taught classes and seminars at many other schools and teaching conferences. He has a B.S. in Physics from Edinboro University of Pennsylvania and a Ph.D.
Remediation and Defensive Strategies
in Physics from University of Illinois, Urbana-Champaign. His Industry Certifications are: Certified Ethical Hacker, Microsoft: MCP, MCDST, MCTS: Vista; Network+, Security+, Certified Fiber Optic Technician. For copies of the slides and additional materials please see the DEF CON 17 Archive here:
Related talks
Main Stage·1 hr 6 min
Valsmith · Colin Ames · and David Kerb
Valsmith and Colin Ames details metaPhish Valsmith Attack Research, LLC.
Main Stage·58 min
Sandy Mouse Clark · Edw0rd
Sandy Mouse Clark and Edw0rd details de Gustibus, or Hacking your Tastebuds Sandy Clark "Mouse" University of Pennsylvania Do you geek out over food.
Main Stage·55 min
Righter Kunkel
Righter Kunkel details air Traffic Control: Insecurity and ADS-B Righter Kunkel Security Researcher This presentation will take a look at the Air Traffic Control (ATC) system from a pilot's view.