Look Who it Was Random video

DEF CON 17 - Sam Bowne - Hijacking Web 2.0 Sites with SSLstrip

961 views · Published 20 November 2013 · 35:38 · Indexed 14 November 2026

Channel: DEFCONConference · 2013 · Science & Technology

Watch on YouTube

Hijacking Web 2.0 Sites with SSLstrip--Hands-on Training
Sam Bowne Instructor, City College San Francisco, Computer Networking and Information Technology Department

Many Websites mix secure and insecure content on the same page, like Facebook. This makes it possible to steal all the data entered on such a page easily, using Moxie Marlinspike's new SSLstrip tool. First I will give a brief explanation and demonstration of the technique, and then I will help audience members set up the attack themselves on their own laptops. Detailed instructions and all required software will be provided. Audience members should bring a laptop computer to participate in the hands-on training.

Sam Bowne has been teaching computer networking and security classes at CCSF since 2000. He has given talks at DEFCON and Toorcon on Ethical Hacking, and taught classes and seminars at many other schools and teaching conferences.

He has a B.S. in Physics from Edinboro University of Pennsylvania and a Ph.D. in Physics from University of Illinois, Urbana-Champaign. His Industry Certifications are: Certified Ethical Hacker, Microsoft: MCP, MCDST, MCTS: Vista; Network+, Security+, Certified Fiber Optic Technician.

For copies of the slides and additional materials please see the DEF CON 17 Archive here: https://defcon.org/html/links/dc-archives/dc-17-archive.html

More from this channel