mirror of https://github.com/couchfault/sslstrip2.git synced 2025-10-29 16:56:59 +00:00

Henry Pitcairn 8561ef8a12 Revert "delete cause Spanish gag law"

This reverts commit c5f721f542fc5b65df0fc909b105c98432cb93c1.

2015-12-22 14:29:03 +00:00

SSLStrip+

This is a new version of [Moxie´s SSLstrip] (http://www.thoughtcrime.org/software/sslstrip/) with the new feature to avoid HTTP Strict Transport Security (HSTS) protection mechanism.

This version changes HTTPS to HTTP as the original one plus the hostname at html code to avoid HSTS. Check my slides at BlackHat ASIA 2014 [OFFENSIVE: EXPLOITING DNS SERVERS CHANGES] (http://www.slideshare.net/Fatuo__/offensive-exploiting-dns-servers-changes-blackhat-asia-2014) for more information.

For this to work you also need a DNS server that reverse the changes made by the proxy, you can find it at https://github.com/LeonardoNve/dns2proxy.