View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0002444Kali LinuxNew Tool Requestspublic2015-07-24 00:502018-02-06 14:54
ReporterMister_X Assigned To 
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionwon't fix 
Product Version1.1.0 
Summary0002444: sslstrip2
Description

This is a new version of Moxie´s SSLstrip with the new feature to avoid HTTP Strict Transport Security (HSTS) protection mechanism.

This version changes HTTPS to HTTP as the original one plus the hostname at html code to avoid HSTS. Check my slides at BlackHat ASIA 2014 OFFENSIVE: EXPLOITING DNS SERVERS CHANGES for more information.

For this to work you also need a DNS server that reverse the changes made by the proxy, you can find it at https://github.com/LeonardoNve/dns2proxy.

Demo video at: http://www.youtube.com/watch?v=uGBjxfizy48

Additional Information

URL: https://github.com/LeonardoNve/sslstrip2

Activities

g0tmi1k

g0tmi1k

2018-01-29 15:15

administrator   ~0008484

To help speed up the process of evaluating the tool, please make sure to include the following information (the more information you include, the more beneficial it will for us):

  • [Name] - The name of the tool
  • [Version] - What version of the tool should be added?
    --- If it uses source control (such as git), please make sure there is a release to match (e.g. git tag)
  • [Homepage] - Where can the tool be found online? Where to go to get more information?
  • [Download] - Where to go to get the tool?
  • [Author] - Who made the tool?
  • [Licence] - How is the software distributed? What conditions does it come with?
  • [Description] - What is the tool about? What does it do?
  • [Dependencies] - What is needed for the tool to work?
  • [Similar tools] - What other tools are out there?
  • [How to install] - How do you compile it?
  • [How to use] - What are some basic commands/functions to demonstrate it?
Mister_X

Mister_X

2018-02-01 02:27

reporter   ~0008601

Not available anymore as explained on Github.

Issue History

Date Modified Username Field Change
2015-07-24 00:50 Mister_X New Issue
2018-01-29 10:23 g0tmi1k Summary Add sslstrip2 => sslstrip2
2018-01-29 15:15 g0tmi1k Note Added: 0008484
2018-02-01 02:27 Mister_X Note Added: 0008601
2018-02-06 14:37 sbrun Status new => closed
2018-02-06 14:37 sbrun Resolution open => won't fix