moxie0 / sslstrip

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
http://www.thoughtcrime.org/software/sslstrip/
GNU General Public License v3.0
1.93k stars 432 forks source link

302 requests not working #8

Closed sol-vin closed 12 months ago

sol-vin commented 11 years ago

I was pulling my hair trying to figure out why sslstrip wasn't striping even though I was spoofing. After trying for a while I started getting these when loading new pages.

The first one happens on first load, the second one if you hit refresh really quickly after the first load. If you wait awhile the request goes through normally, but ssl still isn't stripped. :( a b

crblanaru commented 11 years ago

Hey,

I've got a fix for that.

Cristian

sol-vin commented 11 years ago

Oh cool! So is this problem resolved?

crblanaru commented 11 years ago

Have a look under pull request ("Fix on location:ht issue in firefox and other related issues"). It should be sorted now. It might take a while until Moxie accepts the change though, so you might want to do the change manually.