Tested and works so far with OWASP Juice Shop online
http://demo.owasp-juice.shop/ftp/quarantine
When it is not broken lol. Because, let us be clear. This is the only http site, I
could find, which allows you to test downloads. Due to this and many other reasons,
it is often broken.
Does not work OWASP Juice Shop Locally http://localhost:3000/
Why test locally when you can straight up just test on Remote VM, on your lab.
- Enable port forwarding (1) just in case you want to remote.
It doesn't seem to make a difference. -
Set ALL iptables - INPUT, OUTPUT, FORWARD.
When using Bettercap we are using INPUT and OUTPUT
There is no conflict local vs remote. - Enable arp_spoof.py, which sets you onPath.
- setup_environment will take care of all of this for you.
- Start webserver locally: service apache2 start
-
Webroot:Location of where webfiles are stored:
/var/www/html/
We want to use 301 - moved permanently - to tell our response packet it is being redirected.
- Linkedin.com
- winzip.com
- Try loading in the full address with http, this works with
http://7-zip.org - Tested and worked to spoof download...
http://www.udemy.com/ -
You could try experimenting with a bunch more.