search

moxie0 / sslstrip

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
http://www.thoughtcrime.org/software/sslstrip/
GNU General Public License v3.0
1.91k stars 428 forks source link

Python 3 port #30

Open hannob opened 4 years ago

hannob commented 4 years ago

I wanted to ask if anyone has been doing any work on a Python 3 port.

I've been using sslstrip regularly in workshops to demonstrate risks of insufficient HTTPS, bad redirects, lack of HSTS etc. and I would prefer being able to continue using it in the future. With the deprecation of Python 2 sslstrip has been removed from latest Ubuntu etc.

I might try to make a port myself, but I wanted to ask here if anyone else is already workin on it or interested in joining forces.

micwoj92 commented 3 years ago

@hannob https://github.com/micwoj92/sslstrip3

I only found out about this tool because it was dropped from Arch Linux repos today. I don't really know how to use it but seems to work for me. Could you test?

(also pinging @richardwellerson @aminvakil @acheong08 because you upvoted this issue)