🪤

SSL Stripping Attack

Complex

Free preview · 2 of 6 steps

The attack: exploiting HTTP-first browsing

When you type bank.com in a browser, it first tries HTTP (port 80) — then the server redirects to HTTPS. This first HTTP request is the vulnerability.

An attacker in a MITM position intercepts the HTTP request, establishes their own HTTPS connection to the real server, and forwards a downgraded HTTP response to the victim.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step