github/MITMf
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/MITMf.git synced 2025-07-07 21:42:17 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

added HSTS bypass as demonstrated by Leonardo Nve at blackhat

Browse source
This commit is contained in:
byt3bl33d3r 2014-10-11 13:09:06 +02:00
parent 5be41cfd37
commit 82739bba9f
11 changed files with 765 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

8
sslstrip/ClientRequest.py
View file

@ -57,10 +57,10 @@ class ClientRequest(Request):
headers['accept-encoding'] == 'identity'
logging.debug("Zapped encoding")
if 'Strict-Transport-Security' in headers: #kill new hsts requests
del headers['Strict-Transport-Security']
logging.info("Zapped a HSTS request")
if 'strict-transport-security' in headers: #kill new hsts requests
del headers['strict-transport-security']
logging.info("Zapped HSTS header")
if 'if-modified-since' in headers:
del headers['if-modified-since']