mirror of https://github.com/couchfault/sslstrip2.git synced 2025-10-29 16:56:59 +00:00

Go to file

Henry Pitcairn 8561ef8a12 Revert "delete cause Spanish gag law"

This reverts commit c5f721f542fc5b65df0fc909b105c98432cb93c1.

2015-12-22 14:29:03 +00:00

2015-12-22 14:29:03 +00:00

2015-12-22 14:29:03 +00:00

.gitignore

ignore idea

2015-04-01 01:17:40 +02:00

COPYING

2015-12-22 14:29:03 +00:00

debug_ssl.log

2015-12-22 14:29:03 +00:00

lock.ico

2015-12-22 14:29:03 +00:00

poc.log

2015-12-22 14:29:03 +00:00

README

2015-12-22 14:29:03 +00:00

README.md

2015-12-22 14:29:03 +00:00

setup.py

2015-12-22 14:29:03 +00:00

sslstrip.log

2015-12-22 14:29:03 +00:00

sslstrip.py

2015-12-22 14:29:03 +00:00

SSLStrip+

This is a new version of [Moxie´s SSLstrip] (http://www.thoughtcrime.org/software/sslstrip/) with the new feature to avoid HTTP Strict Transport Security (HSTS) protection mechanism.

This version changes HTTPS to HTTP as the original one plus the hostname at html code to avoid HSTS. Check my slides at BlackHat ASIA 2014 [OFFENSIVE: EXPLOITING DNS SERVERS CHANGES] (http://www.slideshare.net/Fatuo__/offensive-exploiting-dns-servers-changes-blackhat-asia-2014) for more information.

For this to work you also need a DNS server that reverse the changes made by the proxy, you can find it at https://github.com/LeonardoNve/dns2proxy.