4 ms·

I've seen this said in several spots and I am curious. Could you point me to a resource that teaches me how to do this with a HTTP website please? I have no exp

• aeturnum 6y ago
  The answer to your question will depend on the set of technologies that you are using, but a great place to start is the EFF's Certbot[1]. Certbot will, for many common web servers, verify your servers' domain address and install a cert that will work for ~3 months. It's free and mostly automated. I've been getting certs for all of my side projects and it takes about ~10 minutes each. Highly recommend. [1] https://certbot.eff.org/ https://certbot.eff.org/
  • stonecharioteer 6y ago
    Oh wait I didn't out across what I wanted. I meant how do I do a simple "attack" on a http website that's at a mall as OP said. I know how to use certbot for the certificates, (thank you Digital Ocean docs). I was wondering. If I run a simple http page on my home network, how can I, from another device, change it or make another client get a modified page with the same address?
    • shawnz 6y ago
      I think they are referring to ARP cache poisoning. Or maybe Wi-Fi promiscuous mode packet sniffing, but that's a read-only attack.