moxie0/sslstrip

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2073 stars · 448 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

sslstrip is a Python command-line tool that implements Moxie Marlinspike's SSL stripping man-in-the-middle attack, downgrading HTTPS links in intercepted HTTP traffic to plain HTTP. It works alongside ARP spoofing and iptables redirection to capture credentials and session data from victims on a local network.

Use cases

• demonstrate ssl stripping attacks in security training
• test whether a network is vulnerable to mitm downgrade attacks
• capture credentials over http during a pentest
• learn how https downgrade attacks work
• audit client-side https enforcement on websites

When to choose

• performing authorized penetration tests on local networks
• teaching or demonstrating TLS downgrade attack concepts
• auditing legacy sites that still serve http links

When to avoid

• any use without explicit authorization from network owners
• modern environments with HSTS and HTTPS-everywhere defaults, where the attack is largely ineffective
• projects needing maintained tooling - it targets Python 2 and is unmaintained

Facets

cli-tool · maturity maintenance

security networking proxy penetration-testing security penetration-testing networking python cli mitm ssl-stripping man-in-the-middle arp-spoofing pentest linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="moxie0/sslstrip")