moxie0 / sslstrip

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
http://www.thoughtcrime.org/software/sslstrip/
GNU General Public License v3.0
1.91k stars 428 forks source link

Code Injection #2

Open ghost opened 12 years ago

ghost commented 12 years ago

I needed a proxy to inject code into HTML pages returned from a server before sending them back to the client. I started out writing my own then gave up and patched sslstrip.

The patch basically reads in code from a text file, called injection.txt, and checks for responses with the Content-type: text/html then injects the code into the page.

Don't know if you'd want injection functionality in sslstrip but, I figured I'd holla at you nevertheless.