Update README.md

This commit is contained in:
LeonardoNve 2014-03-28 18:16:00 +08:00
parent 18989f4532
commit 6f2ab2e264

View File

@ -1,9 +1,9 @@
SSLStrip+
=========
This is a new version of Moxie´s SSLstrip http://www.thoughtcrime.org/software/sslstrip/ with the new feature to avoid HTTP Strict Transport Security (HSTS) protection mechanism.
This is a new version of [Moxie´s SSLstrip] (http://www.thoughtcrime.org/software/sslstrip/) with the new feature to avoid HTTP Strict Transport Security (HSTS) protection mechanism.
This version changes HTTPS to HTTP as the original one plus the hostname at html code to avoid HSTS. Check my slides at BlackHat ASIA 2014 (OFFENSIVE: EXPLOITING DNS SERVERS CHANGES) for more information.
This version changes HTTPS to HTTP as the original one plus the hostname at html code to avoid HSTS. Check my slides at BlackHat ASIA 2014 [OFFENSIVE: EXPLOITING DNS SERVERS CHANGES] (http://www.slideshare.net/Fatuo__/offensive-exploiting-dns-servers-changes-blackhat-asia-2014) for more information.
For this to work you also need a DNS server that reverse the changes made by the proxy, you can find it at https://github.com/LeonardoNve/dns2proxy.