On Fri, 2013-04-19 at 09:16 -0700, Lisa Kachold wrote: +AD4 arpspoof +AFs-arp rarp nature of tcp/ip and the linux kernel+AF0 +AD4 sslstrip +AFs-sslstrip decode packets including auth/password and url - +AD4 run tool to get a list of everything victim sends out or accesses+AF0 So you're assuming that I wouldn't request the SSL connection initially and that the site provides a non-SSL version of its contents. Neither of those scare me, but I could see where that could get some people. +AD4 PLUG Hackfests at DeVry University 2nd Saturday 10:00 - 2:00 PM - +AD4 Lab/Presentation Hackfest with targets and trainers Unfortunately a bit far for me to travel these days, or I would :-) Ted