added HSTS bypass as demonstrated by Leonardo Nve at blackhat

This commit is contained in:
byt3bl33d3r 2014-10-11 13:09:06 +02:00
parent 5be41cfd37
commit 82739bba9f
11 changed files with 765 additions and 18 deletions

View file

@ -23,6 +23,7 @@ from twisted.web.http import HTTPClient
from ResponseTampererFactory import ResponseTampererFactory
from URLMonitor import URLMonitor
from ProxyPlugins import ProxyPlugins
class ServerConnection(HTTPClient):
''' The server connection is where we do the bulk of the stripping. Everything that
@ -105,6 +106,7 @@ class ServerConnection(HTTPClient):
self.client.responseHeaders.addRawHeader(key, value)
else:
self.client.setHeader(key, value)
self.plugins.hook()
def handleEndHeaders(self):