weyne/sslstrip2
1
0
Fork 0
mirror of https://github.com/couchfault/sslstrip2.git synced 2025-10-29 16:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
LeonardoNve 2014-03-28 17:58:02 +08:00
parent 8b577594a6
commit 18989f4532
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
README.md
View File

@ -0,0 +1,11 @@
SSLStrip+
=========
This is a new version of Moxie´s SSLstrip http://www.thoughtcrime.org/software/sslstrip/ with the new feature to avoid HTTP Strict Transport Security (HSTS) protection mechanism.
This version changes HTTPS to HTTP as the original one plus the hostname at html code to avoid HSTS. Check my slides at BlackHat ASIA 2014 (OFFENSIVE: EXPLOITING DNS SERVERS CHANGES) for more information.
For this to work you also need a DNS server that reverse the changes made by the proxy, you can find it at https://github.com/LeonardoNve/dns2proxy.
Demo video at: http://www.youtube.com/watch?v=uGBjxfizy48