github/MITMf
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/MITMf.git synced 2025-07-15 01:23:54 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

now stripping hsts requests from headers

Browse source
This commit is contained in:
byt3bl33d3r 2014-07-18 13:21:48 +02:00
parent 8c4d55b01b
commit 87971d9586
2 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
plugins/JavaPwn.py
View file

@ -1,6 +1,3 @@
#
# Work in progress
#
from plugins.plugin import Plugin from plugins.plugin import Plugin
from plugins.BrowserProfiler import BrowserProfiler from plugins.BrowserProfiler import BrowserProfiler
from time import sleep from time import sleep

2
sslstrip/ClientRequest.py
View file

@ -55,9 +55,11 @@ class ClientRequest(Request):
if 'accept-encoding' in headers: if 'accept-encoding' in headers:
headers['accept-encoding'] == 'identity' headers['accept-encoding'] == 'identity'
logging.debug("zapped encoding")
if 'Strict-Transport-Security' in headers: #kill new hsts requests if 'Strict-Transport-Security' in headers: #kill new hsts requests
del headers['Strict-Transport-Security'] del headers['Strict-Transport-Security']
logging.debug("zapped a HSTS request")
if 'if-modified-since' in headers: if 'if-modified-since' in headers:
del headers['if-modified-since'] del headers['if-modified-since']