How to Steal Passwords: SSLstrip, LNK Attack, Cross-Site Request Forgery & Scary SSL Attacks Sam Bowne.
More Trick For Defeating SSL DEFCON 17 Moxie Marlinspike.