added PoC session hijacking plugin

This commit is contained in:
byt3bl33d3r 2014-11-26 20:01:28 +01:00
parent e2132a6ca9
commit e4cf519356
7 changed files with 69 additions and 17 deletions

View file

@ -54,7 +54,7 @@ class ServerConnection(HTTPClient):
def sendRequest(self):
if self.command == 'GET':
logging.info("%s Sending Request: %s %s" % (self.client.getClientIP(), self.command, self.headers['host']))
logging.info("%s Sending Request: %s %s %s" % (self.client.getClientIP(), self.command, self.headers['host'], self.headers['user-agent']))
self.plugins.hook()
self.sendCommand(self.command, self.uri)
@ -100,8 +100,8 @@ class ServerConnection(HTTPClient):
if (value.find('gzip') != -1):
logging.debug("Response is compressed...")
self.isCompressed = True
if (key.lower() == 'strict-transport-security'):
value = 'max-age=0'
#if (key.lower() == 'strict-transport-security'):
# value = 'max-age=0'
elif (key.lower() == 'content-length'):
self.contentLength = value