SSL stripping incident

Requirement

Download and install MITM proxy‚Äč

How to trigger incident

Step 1: Run the mitmdump on the testing PC

Step 2: Insert the IP address and the port number on the test device

Long press wifi icon>Click settings on the currently connected wifi>Advanced>Chanage proxy to manual>Add the IP address and port number of the testing PC on the test device.

Wait for the test device to appear on the PC.

Step 3: Run the scripts

Step 4: Search on your device

Open a browser on the test device and search the SLL Stripping demo site.

The 'https' links have been stripped down to 'http'.

How to remediate the incident

Disable the proxy

Follow the steps below to disable the proxy on the test device.

Long press wifi icon>Click settings on the currently connected wifi>Advanced>Chanage proxy to 'None'