sslsniff
SSL/TLS man-in-the-middle attack tool
Matches ATT&CK tactic: Collection ↗
ToolcollectionredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
sslsniff is designed to create man-in-the-middle (MITM) attacks for SSL/TLS connections, and dynamically generates certs for the domains that are being accessed on the fly. The new certificates are constructed in a certificate chain that is signed by any certificate that is provided. sslsniff also supports other attacks like null-prefix or OCSP attacks to achieve silent interceptions of connections when possible.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install sslsniff`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
