mandatoryprogrammer / xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!
MIT License
1.64k stars 320 forks source link

Disable automatic SSL/TLS setup #1

Open jeffalo opened 3 years ago

jeffalo commented 3 years ago

It would be useful to be able to disable the automatic SSL/TLS so that you can handle the certificates seperately.

For example, I already have an nginx reverse proxy setup with my cloudflare origin certificates. I don't need the automatic certificates and stuff, so if I could run it over http and handle the rest myself that would be useful.

NHAS commented 2 years ago

Yeah would be good, I also run it behind an nginx proxy, and having it try and acme to generate certs seems to be breaking the setup flow.

0xspade commented 2 years ago

does the email notification works on you guys when you implemented this pull request ?

wifiuk commented 2 years ago

+1 being able to disabled SSL/TLS stuff would allow me to use it with cloudflare argo tunnels, at the moment I'm struggling to get it to work as I cant see where to disable the SSL auto setup.

h3xitsec commented 1 year ago

+1 i need to be able to run it behind my traefik proxy

mux0x commented 1 year ago

same for me

adamjsturge commented 7 months ago

@jeffalo @0xspade @NHAS @wifiuk @mux0x @h3xitsec I added this in my own fork a while ago but then after seeing how many out of date dependencies I made my own version in Golang. I'm using dependency bot and actively maintaining it https://github.com/adamjsturge/xsshunter-go

Feel free to check it out!